STIX2 json for 2023-01-18

STIX2 json for all bruteforce ndicator--5281a1ff-7714-492e-ae36-388560ac5730", "indicator--b28237f3-f956-4566-b9d0-6219322cd4f9", "indicator--b6994022-be76-48c8-8b2e-e5c0e58bba87", "indicator--aa8a33ae-946b-44dc-bd9a-454fdcde8d3e", "indicator--b7efa9d2-7f2b-4e53-aec3-0fd3bb36423b", "indicator--ac6bb140-de3f-45ae-99a0-37d54dc19747", "indicator--4978725f-aa0e-4229-aa7c-4d0523321de6", "indicator--27516af1-8c4d-4855-a168-614f9644f0f8", "indicator--4b99ff38-005b-440d-af6d-5bdc67238bc4", "indicator--241aa6b2-b366-4864-bd5b-c5afca3a744a", "indicator--beef5579-7548-465c-89bb-236415f6be4c", "indicator--541b578e-5de2-43b5-8d74-d72bdc5893f1", "indicator--521c89be-58a7-4a07-9630-95f137274390", "indicator--c034b7cf-bbdd-4bc1-a7b0-319c1669bb1d", "indicator--da6c6730-fe83-4013-a9d7-b7dbdd6fa89c", "indicator--d177f3f9-b111-49af-a605-8530a0af5067", "indicator--d4d9f569-89c3-4274-b96d-9b308663a9e1", "indicator--3ccc5705-658c-4061-886f-dcf07b1301ed", "indicator--e514e118-a222-45f4-8959-0bb3856da740", "indicator--c904ef70-1e9b-47e6-924b-b6d1deb12c02", "indicator--6769ac71-14cd-4032-8648-2fdcd6d4230c", "indicator--16775116-fd3c-43b7-acec-e6f44ce787bc", "indicator--f0a678ff-3448-4dd5-94bb-fccf59b58fd2", "indicator--f65af911-4771-4f6e-88ae-bf178052d3d3", "indicator--ee8779fd-da34-41ee-90a7-6e7c6fb55f85", "indicator--8aa5eb18-6345-4e4a-b619-f60b3c457b32", "indicator--b0bc54e4-44b8-4e22-b668-fd1a92a0efeb", "indicator--1159dd43-c626-4808-864d-5baebf9c8fe2", "indicator--062bc5da-10b9-4d7d-b4be-b350e372b442", "indicator--18d773fb-37b7-4063-9a7d-c71828afec3b", "indicator--305339e4-4130-458f-9524-67f42c75acca", "indicator--ff1985c1-42be-47ef-8b27-b60947782586", "indicator--c0ec8955-ebf7-4907-b810-658a4d9383ee", "indicator--08d993d2-65e5-4e55-a1db-18a086fe7e60", "indicator--55db981e-fb04-421c-9c87-9efc1f1b7ee0", "indicator--0e99e9b3-fba7-4e0f-a603-74cf7a898602", "indicator--02a872ea-a8e3-4001-aec1-45819f18c428", "indicator--88bf4a2b-e5f8-4aac-821c-b2882d5b7d5d", "indicator--0c924904-94c7-419a-b029-a1419a0fd636", "indicator--a1b194e5-48a1-45da-aac8-c226981f5eb2", "indicator--031a6b1d-54c8-4d88-9439-8739b0fecc3e", "indicator--f4e9766c-e9c0-4ba4-9ad3-c4039ebd0f55", "indicator--db5e96d3-e113-4162-9215-428b223f84e9", "indicator--b215a1a6-4008-4f45-bb51-1853f30c65d0", "indicator--9a5f0a93-ba95-4a22-a288-abe92ce4b3e4", "indicator--19b99a5e-f5c7-445e-b39b-15410a2e67c6", "indicator--cde0765a-fb57-4b75-a6df-f3e1ee08c0fe", "indicator--06248040-8f71-4213-b89b-078cb39187f0", "indicator--f3ae7b72-82d8-4c72-928b-5a7e1b9216ce", "indicator--055a7d19-ac22-45dd-9e6a-20a9d7dc0661", "indicator--fa823cce-2623-4314-8cc7-f1b13241ad1e", "indicator--c8ef58ea-1edd-4622-bfcf-8a4724a3b2c1", "indicator--94f80239-753f-457a-b7b5-bd2c1e4a82a2", "indicator--9a6228a6-78e4-42ad-b0db-32cac58ea10d", "indicator--93a91daa-532c-4563-99b8-3ba13fe62b38", "indicator--1b15a02e-4667-4cf1-83da-4d4c2cadd1e1", "indicator--da0adb6f-a043-49ed-be5b-c8057b382dd0", "indicator--b08b61cb-12e4-4a81-9ea9-aaef379ffb87", "indicator--aee812c2-3006-4227-abb2-a54ffcb5b86a", "indicator--119fa0ec-bb17-4019-b923-5561f050f053", "indicator--2c882990-e590-48f0-ab1c-549c61c8dfb9", "indicator--e692d12e-ad39-4587-bb22-ab73a6768056", "indicator--b2b65153-52bb-43ea-81a7-b3f3f1d88517", "indicator--705ad89b-ae56-4432-bc66-bac5599d91c8", "indicator--7c0990fe-3c96-45f2-81e8-2cd46f470c54", "indicator--6f725125-7a60-444e-ae38-136ce397c196", "indicator--ab467885-efee-44cc-a54b-8d5bf65dd7f5", "indicator--783caf24-0455-4ca2-b177-ca23e53a3d95", "indicator--563ceabe-a4bc-4d9f-b1e2-43d0d8c784b6", "indicator--ff85ab40-1928-4f3c-b149-f50b2977150b", "indicator--44d0ad50-14ee-4b25-a18a-0def36fbbd8c", "indicator--61372ebd-4124-413c-bf6b-b651caab7d3d", "indicator--c4524e1d-e606-4cf6-95f8-0c2330e0268d", "indicator--f4abae6d-063c-4ac4-ae1a-e02ede32cb15", "indicator--eb8c59b8-cd8b-478e-b054-0709f1af922a", "indicator--579d6114-e04e-404e-a1c0-17fb3e063d9e", "indicator--e2d9fec5-d7a3-4781-bf18-e90a893497a9", "indicator--c613ea7c-912e-41ad-a9c0-c1493210234b", "indicator--e7c380c6-e4e6-4fec-8859-d8add3a7f51a", "indicator--51b4cc50-8350-4be1-8bfc-18d3b3883730", "indicator--5d3b414c-a6e0-45f0-bb78-73279a44f2ab", "indicator--1378be14-4afb-4fdd-b1f6-7f24e2dbff3b", "indicator--3b785b87-0e8d-44ef-9e15-cf5e57b873e3", "indicator--28f9a7ba-5516-484f-a218-cd33f4234591", "indicator--9515922c-702a-4308-904a-6cad3cf5b90d", "indicator--054d25f2-d3f8-40c4-8354-de0dfb0c9be9", "indicator--e6c03c80-252f-4bf0-a984-c509aaebdfc5", "indicator--80b771bc-56d3-4a1b-af6e-8dbdd54e76ae", "indicator--aab1f052-6f30-4111-9265-69acce488b1a", "indicator--e68e0b20-30d3-4754-9277-86aecefa0e6b", "indicator--4699b199-08d9-4a3e-8778-6add4e207073", "indicator--15c42c7e-4c2a-43df-8011-97ceb42c8036", "indicator--302f840d-6b07-4b76-847a-9ecb83540f0a", "indicator--fdca2a78-135b-4d7a-8296-20595543651c", "indicator--14d86351-d32b-4c7d-b09e-a5839955783e", "indicator--5adf9b95-a2a5-4cf2-800f-075554de8811", "indicator--52522550-383e-4213-acfa-20603f122b03", "indicator--951750b4-78a6-4edf-a1cb-acafa7740bfc", "indicator--2a904868-9f63-4a76-b114-89aa183131e6", "indicator--7232cb20-7ffe-406a-824c-4b5accb178c3", "indicator--11ed247a-d66e-46c2-951a-4648284b058c", "indicator--022e1008-3d5b-4921-ac2b-688544d6f584", "indicator--e7ad9407-9c7d-4be1-a8ec-2cb22b9c735e", "indicator--24238bc4-0686-4508-80bd-938fa5f698ea", "indicator--e461b30b-5425-4177-a8f1-ab40d5268956", "indicator--e990d407-b258-43bb-a4a8-7fe84a20d11d", "indicator--7ddd64dc-059b-4826-8a6a-ebe5e9eadcdc", "indicator--a0b81c07-590a-45d6-a90d-f7b2a0fb83a4", "indicator--c507b637-60f3-44d0-b9e5-71a439b10da7", "indicator--b9689cff-ce65-4724-b181-e3024bb1d3f7", "indicator--d3b6dae6-3dc1-478b-a488-01a556adcf99", "indicator--f0defa70-7b98-4b23-8c80-7ceafdc7cf2c", "indicator--900bd1bd-f699-46aa-b4da-328870eabbf2", "indicator--1171634b-2b2b-4391-bd33-7e319cea248c", "indicator--d516b6c7-3b1b-4afa-b9f6-e6f3cde5b888", "indicator--7425eb0f-f353-4def-8f7d-312aa084024f", "indicator--738f1e4f-6729-4b12-b3ec-e1c45fd7bfaa", "indicator--77c9accc-50c5-4ca0-bd25-2170d359e6c9", "indicator--02f9f2ee-cf46-4dbb-a231-55c83e73755b", "indicator--b3221201-8cae-4ed0-8511-03891f623c51", "indicator--fae0cab7-7bf5-4e50-ad77-341b3efae039", "indicator--9904a407-0387-4da8-8de5-8e7cd4b52c86", "indicator--a70f9e75-a719-42e6-9ff3-b8eed963036e", "indicator--958d6e10-82a4-4d27-8743-9afc2cf361ec", "indicator--840879e5-a269-46bb-a40c-ef0f90768eb3", "indicator--6fe6ab40-1432-46d3-ac9d-bbf50833aaa9", "indicator--dcfddc86-96f8-4b6c-8f88-85cf34c2803e", "indicator--ab083dd2-1445-4251-89d6-0720588c123e", "indicator--080969d4-9f58-4280-bce3-17923198426d", "indicator--c624ae78-ad7e-4bbb-9947-0d8ee0d9eeb7", "indicator--8474e193-2375-447e-90a9-d3cf3a5ec33f", "indicator--2d0d016c-d4ef-46a0-a4d9-fb6aa221d518", "indicator--f9831908-8ac8-4f98-b546-c7fc4a45ff17", "indicator--a892a5cc-b37f-4e0f-af8e-5c0efce7da0b", "indicator--e53991c9-8478-41ed-9628-726e75fdface", "indicator--fb1e5dcf-1daa-414e-bdfd-a363c9f30866", "indicator--15412f69-b35b-492b-af53-5d340107d596", "indicator--95083a12-1581-4e86-b68a-3bd828031c26", "indicator--c0dac07e-7a50-434e-8a38-25ff2250cc73", "indicator--73fff994-a65d-4640-8b36-c273e286cf0a", "indicator--a594bc95-0c49-4224-b960-8b28fb3857f0", "indicator--6e80d81d-3f43-4c7a-9027-c62c9e50f61d", "indicator--13a4916c-643c-4c5c-8430-f97c29070989", "indicator--4371ae34-f766-4235-924c-06577f01a4c3", "indicator--fc67048d-08f6-48f7-9386-53c3ea38e8cf", "indicator--b5d161eb-9a7e-4468-99c2-b5f94c0b7e88", "indicator--18556885-7e38-4be6-9a14-f8f08fce4858", "indicator--a93ce98d-8868-4701-8b93-42d7192c1f86", "indicator--08d84938-e82c-47a2-a526-fb34b68aa0bb", "indicator--d18fe084-771c-4cd1-b648-c14559e19020", "indicator--d851d836-d881-4163-85c6-70a185b965f3", "indicator--63a4fa09-ba4d-44f7-aedc-27aca93440cd", "indicator--e776b52d-c47d-42d0-9828-1779cf17970a", "indicator--394e9fe6-8e1b-4982-8cec-cf28acab7e3d", "indicator--4e887084-9606-4765-9063-4da46fce9070", "indicator--2e29208a-25e3-43d6-b1de-de6d4a530e07", "indicator--5714066a-b038-4b65-9977-d66c7fed17bd", "indicator--cbf41184-adbb-4727-b01a-3313de71871f", "indicator--a2d9e9fc-1882-46a2-96aa-80081e7f3980", "indicator--05d76112-621e-4753-920a-1b2b2d6b2afd", "indicator--d91be6fb-0145-4527-a0eb-4d5cba633172", "indicator--ffd54d06-02dd-487a-a205-9ac47e776428", "indicator--f6bb7978-d2f4-465a-95a5-3b78b89aa46f", "indicator--e94d2edd-73e6-4eae-89d7-793a5755dabe", "indicator--efeeeccf-b291-49a2-a7ac-8223265fc75b", "indicator--cabe1756-feaa-465c-a306-8c73149ddd18", "indicator--6b2f5f89-86e6-405b-a34d-50efc31a05c3", "indicator--e115a3ee-a238-4dc2-b4c8-b99d7f3ccb00", "indicator--5aa8607a-51ab-44c0-8584-0847a84489b7", "indicator--03bbb080-0b32-4f53-ac1a-166f92a4df49", "indicator--8ea02f8e-3cf7-456f-bdc5-6eda7ae2118e", "indicator--16f9b07a-bafa-476d-b022-c1676bc19733", "indicator--8fc77bea-f825-4cde-b61a-88c86fe22c5d", "indicator--b22c857e-89f8-4c40-aa9c-975ac525117d", "indicator--a357bd53-89ed-4dac-848b-b93234bdf352", "indicator--75550b41-25da-4405-a117-e852523ddbfe", "indicator--644bcb74-1ca3-430f-b7d9-f01278c9c29d", "indicator--eed6611b-8c44-480d-a015-1bd80951931a", "indicator--c49e111b-0e1d-4971-a0da-f114ebef88c8", "indicator--5e9a72cd-10fc-48a2-a0d3-70c62f194732", "indicator--08b879c6-5942-4527-aeef-c2748fea7d0e", "indicator--5fe57e1d-e946-4c36-b85b-f8c30ed5f46e", "indicator--0e2300ae-4529-4013-9323-fc7b793499b4", "indicator--8aff5db2-bf5c-4ae8-927e-e31b74b600cc", "indicator--73ce1477-e862-4079-aed7-1631287b9be6", "indicator--b483f909-4734-4c05-8d2a-ffdf191df74b", "indicator--f7062b6c-a4f8-49ea-ae0b-7b7e648db72c", "indicator--c0311eb5-27c5-445b-b8f3-474bfdd15ae5", "indicator--d70bb5ef-c0e1-47b1-89b5-a2ea126f0d00", "indicator--dbe50f0a-3b12-4391-8b37-a7b5d7fb47db", "indicator--10be87b4-98ea-4c6f-85f0-6147d8b5200f", "indicator--b564b917-045e-480e-8822-4e46fc6da0e2", "indicator--83dbd473-3387-43b2-8d5d-c28a943cb3a3", "indicator--2fdd774e-e792-4f99-a324-33f4e5b6166b", "indicator--78f8382d-a858-43fc-82a9-f0b273a3b6a0", "indicator--7befc79d-4d41-424d-b663-d4bad7a5b2dd", "indicator--b368e4d7-6c95-4aa1-b95f-c81e07458d59", "indicator--59042f5c-4eb9-41f7-bcac-bffc82170d02", "indicator--8496898f-1d36-4c5b-8e4c-6623c828d47d", "indicator--a559826d-d503-4cfd-ad4d-c80333257697", "indicator--135f666a-d9c7-4c4a-9338-6cebc145e358", "indicator--f4e37dff-f626-4de0-986e-2d20eecc71ce", "indicator--795dd712-8eff-45f5-bc27-cdaa56fa07e1", "indicator--d02d9083-88d8-45f4-9136-688879d17c74", "indicator--15ffeb06-7e7b-49b7-96f2-79a82d82a9f5", "indicator--fec3c011-3d86-4b31-b59c-88b2340160d1", "indicator--c9261707-218e-431f-bd68-00146bc73853", "indicator--92d65e9b-7d92-40e6-9e91-c02c8dbe9437", "indicator--61d203c9-c2fc-45c0-ba5a-193099f03a90", "indicator--ee3d539c-9347-49ac-8e16-26c8e7de54c5", "indicator--9626dfb3-a45d-4a28-bb40-eb80c402f50a", "indicator--f74fcc4e-0b4a-45c3-9a07-93984176a2a4", "indicator--002680e4-5ef2-441a-b04e-b04918e935e4", "indicator--8487291f-6eb7-4045-8dac-9dae47168546", "indicator--72705054-3ace-489e-8961-b35d9d179c62", "indicator--56733e93-83f9-44fa-966f-5463485c6209", "indicator--a4cd7d88-464f-41fa-9726-0ceb43164e8f", "indicator--31dbde61-4696-4845-b940-725306352e1d", "indicator--c0f751ac-8c9f-49be-871f-3659b05b2847", "indicator--52425fc5-d68d-4a6b-b62d-1fd8f4339b39", "indicator--accecda7-1765-4fa6-92d2-66d3d19fcc8e", "indicator--6865aabb-08d5-4d45-bcd2-24419dd8a321", "indicator--d0bf61ca-3c5b-467e-baaa-04afe1f9fcee", "indicator--741610ce-4333-4a63-951f-20df3447fa73", "indicator--2d35861a-b560-48b7-b403-31a586815619", "indicator--8dea2174-5f87-4396-8e16-469817828d55", "indicator--1c561679-a3ed-4f43-85dd-7cbf413ed2e6", "indicator--7a43ee96-f150-4b28-9906-11b91cf13a2d", "indicator--c492440a-0d1d-43aa-b66f-8cc7c27c3506", "indicator--f698778d-9d7c-4933-b405-d7e94e3103c4", "indicator--1cbe16b1-6765-4599-bc40-abeb26c1931b", "indicator--a8a01eee-fd5b-40db-81c3-11e5ab4668b6", "indicator--9d3e3cdb-2406-47a0-ac11-b0586f8fb012", "indicator--8e82a32c-d48e-47c5-a0a2-2bd5cb8384c9", "indicator--d65b507c-5807-4b36-8212-d6c4cff9e9cc", "indicator--1d83735a-06b0-4b29-9cf9-98cdf5b25b42", "indicator--e3ea6a74-aa64-4754-b210-fc48cfa40db3", "indicator--d55379d7-6070-45c0-8f68-85af1fc53a67", "indicator--692f5b9c-6185-40d5-a68e-62bcae54afd2", "indicator--6dcdb572-638d-4c9d-a68f-898044d792fc", "indicator--f23dd0cd-4fc8-4e6a-9c8c-849f1877d4dd", "indicator--a3ce0f6f-e517-4878-a7ae-43204e7da710", "indicator--5b6e9a17-ef3f-41b1-86b4-c0f638e524f2", "indicator--dfe1e581-6ac6-4d66-96b3-065ded8fc534", "indicator--2ba1f5bd-2c0f-4aa3-81f3-0ba84e814260", "indicator--cb4bfaae-439f-453f-b0d9-0b07a745c75c", "indicator--c261e0a4-f884-4d4d-b581-971a31115638", "indicator--cb42eefc-4471-4e89-ae26-e4faea297af4", "indicator--b482d6d7-6d82-4464-a233-7cda6f2c5e8b", "indicator--3146a417-129e-4423-a0b7-9f8bff5bee46", "indicator--5e571158-2f8a-4959-902c-708d1aa00334", "indicator--b65598fc-dbcc-4cee-8312-5f9fd1aaa9e0", "indicator--f34654ae-dbea-4d41-8892-1b0762f339e5", "indicator--0377544f-ca88-4e82-949f-a2876b5d2a78", "indicator--fac845ab-7e5c-47b5-a509-4ff87dfe2012", "indicator--914153f7-633a-44ec-b160-e0894ad678b2", "indicator--785260c1-4111-42fc-a45d-283717fb4733", "indicator--d5d8a655-270a-4742-8216-868352dabfde", "indicator--544b2916-5fb0-40b1-b674-7400214ff2b7", "indicator--3cd302e6-2422-4d97-aec3-c058616277aa", "indicator--7fb2b269-82e6-47a2-8e19-93c1b46a2906", "indicator--ec3f1932-afc0-4969-b384-f87dbbd5e635", "indicator--1045bbb8-5808-4ab9-83a1-6c0714291faa", "indicator--650c39c0-018e-4376-9612-3e1ad0db86be", "indicator--72f1631c-d9dd-4eed-a1cb-55f2a132083f", "indicator--11f35fb0-0495-425b-83dd-289da6d9c6ca", "indicator--d7c5e2dd-5315-40dc-bb79-27a68473824b", "indicator--4bef08d5-faf5-4df4-a3c1-5c5c73ed7c69", "indicator--7f9c574d-0206-41b0-8677-ccede6430f35", "indicator--04631ca6-5736-47c5-b2e3-e7e39ba24172", "indicator--54d6b5ff-1b81-4180-9d92-6792319dcb9f", "indicator--f7ac673e-08ef-40ee-8296-9a57db5f3b3e", "indicator--2c9a45f2-8653-4e08-9196-0a65ab6eccae", "indicator--4272ad99-9fcf-4f68-855c-bc0d33c20563", "indicator--3d7c5e86-bb23-40ab-b011-05510e85c149", "indicator--80c3d49a-3844-41ff-a82c-218dedd29a16", "indicator--260f5e77-1cdf-47f7-aaf0-8cd1614516f5", "indicator--1682839d-520f-42c3-a96b-83d035c456a8", "indicator--04aec569-63c1-4535-b4cb-b7ea5e41c31a", "indicator--12a0babe-f899-46e0-9deb-8dccc1e61e72", "indicator--fe65a38f-e125-4056-b23f-504656c478ac", "indicator--c367b8f9-87e7-4703-b92a-b5f1e20810f4", "indicator--e6b1fef9-8df4-4284-a2ba-fa20c5210abe", "indicator--5032ff26-e474-499e-a5d4-902436849bc4", "indicator--6af9f9fc-543b-4a44-be01-b4b7efcc59f9", "indicator--54b36931-45d8-4f5a-b3c9-ddc030e2fd16", "indicator--9c2849f7-daf2-440c-911a-2ffbd85e4387", "indicator--208a5176-ce11-4749-9742-23b553c8ff4a", "indicator--966d61c0-1a1d-4ea2-b6c1-4b570183af84", "indicator--46835732-649f-4c7d-9dc3-055ec550e59a", "indicator--8dee57dd-c3e1-45da-a276-41278d52216b", "indicator--52795a25-df84-459c-aee1-c3ab82c1145d", "indicator--6b16f0b0-927f-45ed-b5ed-0fbce4cdc5c9", "indicator--ae3e97d9-bda1-4c24-b1b5-a1e603fb8e01", "indicator--69fdbddc-3906-4a1f-a3be-8e3050285488", "indicator--79b2b5f6-ac67-4b31-8f7a-c44e7c1008b6", "indicator--8c247dbe-2853-47e4-9492-e01715e949cb", "indicator--e73cb94f-8db9-4afe-a35b-b09b8e8b117b", "indicator--d8504230-2207-432f-b8c0-dc4b1847f527", "indicator--b0fc38e0-f08f-408f-91f3-7c0ef6661db5", "indicator--aac35a2f-b243-41f9-a962-4b372caf1f2f", "indicator--c0287888-fa17-42cf-a65c-8cd6cbac461f", "indicator--0c2cc705-2e9d-4a8c-b522-10028c26c7b0", "indicator--73435028-3be2-4522-a81c-20e7e140c7e8", "indicator--52e17dd7-79e7-45ed-a5d4-d7e644f09fb6", "indicator--dd92a820-af7c-41a7-b3ec-a1892c9d0a46", "indicator--556438b8-8637-488a-b24e-091184e86c0d", "indicator--b36df38c-0666-4e4d-a235-6a0765500baf", "indicator--4c58d1c5-5a34-44fb-90d5-e17ef58f6c36", "indicator--5b39f562-9259-40f8-8bb6-208fa18c84de", "indicator--9351bd2f-3e4b-41d7-b10b-eb8224a4b507", "indicator--d2b8c444-1897-4479-89ff-a8067cd36e6d", "indicator--4fcbf755-4fa2-4a87-a21f-61e6cd3de366", "indicator--b43c3d60-1a65-47de-a896-bbb165617b9b", "indicator--3d016a26-4544-4753-a47c-3d64ab4c307f", "indicator--28562527-6e96-4fcd-8030-c39a6a1c2212", "indicator--fa9691c2-0623-40c4-920a-68b66296d92f", "indicator--f2172af3-349e-4f93-95b2-fb9d2659074e", "indicator--b8565744-a06b-4a8c-9207-9e344709f777", "indicator--51aa7cb6-40f1-4aa0-9c15-0a2991384a2c", "indicator--78592404-fa5d-4797-9d69-efc69c64309e", "indicator--9b232c3e-f714-4e9a-8f7c-e5b49195c84e", "indicator--c75546f3-77d5-4e68-8c0e-921a9f119e4a", "indicator--25c4c3d1-8409-496e-96ed-eda32939128e", "indicator--5a0b36bc-0296-478b-a67a-0daf9710828e", "indicator--78edcdaa-326d-4917-b0df-169bcf765ae2", "indicator--174171ec-fe2c-474e-9db6-98fac433b345", "indicator--7095b097-90ba-44c3-96da-50d9778fc0dd", "indicator--796e8230-c6ba-4f0f-a2bb-004350c75940", "indicator--b36d60ef-2614-4e3e-a9cc-dd40b3d045b8", "indicator--961a7d98-30d5-4348-b88d-2661443a3b7c", "indicator--3de0f9ec-0684-4f10-8dee-76d528d095c2", "indicator--046e9d17-b49c-4b74-ac4d-4fcb4ee0f0ae", "indicator--52e0bd0c-7aa2-4e19-a029-1b8aee8c2a7f", "indicator--45d7f4f2-8c68-40d4-9f49-ad8029cb9f82", "indicator--51351842-89ab-405a-978f-8c6313668467", "indicator--fd8688de-6ae4-4b58-9d6f-230782340b06", "indicator--7389119f-550a-422e-afc1-76f1316ed119", "indicator--c1a542be-8074-410e-a59a-50ef5ff5ca9d", "indicator--6e77b1f2-894a-4c06-888f-d0c04bef7a61", "indicator--e38119a9-c8fc-409c-8227-07fe9a32f441", "indicator--9de6e3b2-3c98-4ab2-b80d-193f72882ca6", "indicator--fe500c5b-45a9-4bbe-a881-02fe2c63570a", "indicator--0dbcb1d3-008f-4aa7-a07b-957f33c7ee58", "indicator--56261dd8-5fb8-46d9-996c-90483d1bc6ce", "indicator--4878bf8e-a2ad-4784-9e0e-a423f787a943", "indicator--d1b06a38-0489-47ff-926a-4b247bb08ae1", "indicator--143f3561-31c9-49e9-be26-b3e96617f88b", "indicator--02a3f410-42d6-414d-8bde-f4cdbbedefa6", "indicator--5104cfe2-adb2-4ac5-9603-6e45e3e7e113", "indicator--51daea91-7b47-4813-9db0-1219a335e40a", "indicator--72306b02-8520-40cc-91f1-d3fd8e6208ba", "indicator--8c73f9bc-3f35-41c1-bd55-99620a8e17e8", "indicator--e62533a0-daca-4ec0-b175-d0c8f5f04aeb", "indicator--6a23bb5b-ea2d-4d52-806f-c0d9baf1310e", "indicator--b214a0f2-d59c-4135-96ee-8f695908d431", "indicator--0752b6ce-40a1-4223-8a58-66d1a817f235", "indicator--320283cb-688f-42c8-86ad-17a25ae9e0c0", "indicator--4a31cd6c-6fe0-4280-b945-837ca61b0407", "indicator--b9f091a1-570b-4742-9ef8-056a8996cf2a", "indicator--3f5cec77-1f4c-42e1-8329-b5301ed38d10", "indicator--6511f127-ba4c-49ec-b77b-f1158f65927f", "indicator--14a0e628-a689-41e7-8c00-30a2c3f88501", "indicator--1e2389a0-a18a-4a23-bf30-0e6f573bbb5e", "indicator--b2800d06-996d-4314-9a4b-6b3b3f1bf8b1", "indicator--fdeeb5a7-140b-498e-b12a-7170b5762ed6", "indicator--d46b46ea-eaef-4d16-95a3-09b87f583723", "indicator--995813c3-a40f-42dc-8696-1a37c8d77c39", "indicator--97317448-d8ca-4076-8f8d-38f8d87f02d8", "indicator--dc012e7b-7944-40de-ad05-d72d9389f125", "indicator--246dcf4c-4238-482f-aa5f-1081f22c196b", "indicator--a0a9a718-4ab2-4a71-8d9c-68f3b66eeeea", "indicator--98a20cba-a6ab-4134-8895-edafe741e539", "indicator--53fa8d9d-6956-4a37-a99a-a27492b1ad6a", "indicator--3c388735-96dc-4245-888d-bcd9428871ad", "indicator--ac307500-8147-43ec-9b14-3e468c4a0f32", "indicator--e5ad85cc-926f-479b-8d1e-b3e11ba28be3", "indicator--54d33539-ff5f-49ab-820a-d17f6acc6bf3", "indicator--4910281f-8d3f-4461-8ef1-793ccc45dd25", "indicator--3fe3d9a5-f6fd-4377-b65e-14efcf1177d0", "indicator--e2bf13d9-4b65-4e9b-97b7-2205c9a3a8ad", "indicator--063055c7-c8aa-45b6-aa91-fe8593c5a3d4", "indicator--a6e6d609-2d03-4668-af82-5ddb81ad3c60", "indicator--cdc19f3d-a200-49df-bf4c-686b7775e5bf", "indicator--f5a54817-15dc-4fb7-aea9-a8504396bcf6", "indicator--705dc10e-2fb6-4fb3-85f3-a23be328628c", "indicator--64ac1440-2bda-460b-9622-b1420fdf6896", "indicator--80474a3a-6dab-4dca-8722-fef2186af58f", "indicator--938184a3-9699-45b2-8ebe-b018743423e4", "indicator--e596146e-0220-4382-be8e-abe8b7a2c31a", "indicator--0acbeb1c-4c34-45f3-a3b3-3ca145d6a629", "indicator--2b2529f1-9eb7-448f-a375-65ed61fa9240", "indicator--9cac0c4c-7149-4b67-bc15-885abd6a2287", "indicator--6a5c8c6f-10b5-4fff-8f17-62217e058ad7", "indicator--61a473c7-70b9-476b-b7c5-da014de0837c", "indicator--ebc497d6-d580-481b-926c-6ff76249b466", "indicator--4950d14f-d833-4233-9d02-fce709ccdd90", "indicator--03f09f23-b273-42a6-aa4a-588387c707e2", "indicator--d467c80a-9b20-4b7d-ab8e-43a1b9e46e55", "indicator--a664cbea-c0f0-42ed-8238-25daf232c1eb", "indicator--7c315d16-4468-434b-bca7-d4b09ea25ece", "indicator--229ea930-8d47-408a-ae2f-1e7befc69184", "indicator--8d8cab27-42cf-47f2-8674-df4e38f1cf1f", "indicator--8b40fae6-625a-44fa-ad04-2e7e028aa0a2", "indicator--436767d6-311b-4836-a72c-76013c7a25da", "indicator--c2316577-da67-4cd8-bfc3-51f4683f6925", "indicator--469216a4-9980-4fe6-841b-6a0fb0606d0a", "indicator--22e92c13-3201-4d6a-953a-9c2a2608e086", "indicator--4879ecbf-86a1-440f-902e-22153bdb6be8", "indicator--d409762a-4cc5-428b-9b12-de803cd33695", "indicator--fb975064-3dfb-4bf9-bf23-8a88221d4669", "indicator--1ea98c1e-4ab7-4371-8728-3bd22959e621", "indicator--489c6f18-25fb-4e7a-8eca-30dcaf283441", "indicator--f2e216e4-380e-4b57-86ad-aeee1b8a6646", "indicator--df8ee686-5f6a-4910-898f-7693660f30ab", "indicator--2cf3e5f7-78f0-4a4a-8ad3-2f82f364cfba", "indicator--d2517f1d-0be1-4a65-a1f6-efe015588b06", "indicator--4602c961-79b9-4489-b24a-9f53c9d92f8f", "indicator--782bddec-c4e3-4ec3-ab71-4b7e7c3f7338", "indicator--5a72e63e-1cde-4b7a-8dec-cb91794e31f2", "indicator--70ffa00d-0408-480c-ac6f-6f0f1b2c749c", "indicator--cf2db1d1-7ad6-4a4e-9017-0196c82fac8a", "indicator--8380789c-8d50-4ba8-8042-bfa37f466a04", "indicator--f7322586-8688-421a-98bc-1d4338daa2cd", "indicator--ae4066cd-6209-4eb6-8e4b-bc681d856a01", "indicator--ee5ae155-64be-4309-8671-865016bdfbb2", "indicator--e236f716-cf11-4757-b189-bbd2e078b95b", "indicator--a5e5e11f-ddc0-42da-82f4-82c7460998d1", "indicator--08fb2ea2-aa66-49e8-8347-238de2f68d90", "indicator--ebbb4068-9427-428d-8f98-9bbbc47e51f5", "indicator--d0889494-ce5c-44d0-8a37-2e2174ce6715", "indicator--6a34cffe-405a-4aaf-a4fd-f6a9b431f4e7", "indicator--854df4b2-e358-48c7-b4b1-98b29c7f98fd", "indicator--9ae41bb1-9374-45a7-8ff5-323e5d1564ae", "indicator--cac2e307-3615-480e-9beb-aab729b3f9e5", "indicator--f39826c8-f091-49aa-a788-93c8a5ee05a8", "indicator--bc17add7-c101-49a4-9903-dc2d5df9fcd7", "indicator--19d91890-1381-46e7-9929-9fe11c931567", "indicator--60990d17-1a4b-4b84-9b28-513a85fee143", "indicator--15e0a255-b70c-4599-b770-2b015e673943", "indicator--e50176d8-f300-470d-8053-9076b21914e1", "indicator--369d47e6-70f6-4a9b-be4c-bc0f834c151f", "indicator--4c1cddbd-5d08-4439-8a7e-683c6cfbdb62", "indicator--a3616b64-45eb-4bd4-8a3f-c0c37fe40664", "indicator--7e99dc31-907f-4eba-80eb-5b14e7e71638", "indicator--e80ec62f-8f54-4872-aeed-881139c8ec2e", "indicator--baf1d784-cc95-4845-be6b-c77add10c876", "indicator--7333d689-c3a1-4eac-90e6-b8d6a06fc842", "indicator--205c4574-d943-4873-8e37-ae3c786aa403", "indicator--36d232b6-ba27-4eeb-9d45-66e8036b11b8", "indicator--5c42e4e5-6e5a-4fca-8ec5-adb9e960333a", "indicator--6564b778-9162-4ca7-abb4-7e1ab51f79c0", "indicator--d5baf9f9-6b82-4898-8a53-54a02e61ffae", "indicator--b44ccd35-b5e2-4fbc-8c66-aa727e19b315", "indicator--6e74ec52-6001-44cf-87ce-0fb18bfa5186", "indicator--53ba0291-2357-46c9-a090-9a4c147796cf", "indicator--3e2ce915-1252-4048-b639-c5464cf766c8", "indicator--31f6bbd1-77c2-4e36-931f-45751c697eac", "indicator--3c77ff4b-ee25-48d6-94ae-b9c812d9368b", "indicator--c9ad4279-26dc-4325-9af5-575591086a67", "indicator--0a57522b-d23f-4f17-9255-d4056da0edc3", "indicator--39222f7b-15e3-41d4-b44d-6f590c24ca0a", "indicator--54c3cdd9-185e-4875-b3fa-a183a662ea0e", "indicator--7ce92c34-74ed-4edd-b087-83c67fb7ffd5", "indicator--ca24b773-3653-4872-91fa-a92f0a85a6cf", "indicator--ae068283-9184-48fd-ac7e-a98672c29fb6", "indicator--f647e817-3979-4726-99bb-a92f71ee9e4c", "indicator--e26c0994-95e0-4228-a23c-928fea91ed4d", "indicator--e4159c81-2747-47ae-835c-b76a0b90cef1", "indicator--2a2d5ba9-f0de-4bc5-a5df-bbad0cb8c3d4", "indicator--f64d88f8-554b-49ed-986c-5b61b2c24b5a", "indicator--a073a607-70ff-4185-b1d6-451b312ba02b", "indicator--34c2f719-4803-4d5a-9a65-ddaeab700398", "indicator--915c0ff8-7cd6-4177-8449-81e5e402482b", "indicator--6763e0bf-1b0a-41be-9a5d-c7fa26dd3259", "indicator--0ae32862-4d33-4656-9dea-becd49c3eb12", "indicator--b290a495-2c3e-4e84-a142-a077639e8973", "indicator--d0a04389-ae45-4681-86c3-1e599a8fc1bb", "indicator--4f1a2e06-c7db-4cb1-ae23-1fefef0da4d8", "indicator--4a8cc0ec-519a-4718-b308-7694e69d52e7", "indicator--2a11b6cb-110b-4f92-9261-aa70fb8e9a4f", "indicator--726000f8-2d1e-445a-8565-b1029f925351", "indicator--1afe8a1a-741d-4640-9b7f-88ef0ecf9f32", "indicator--a64abf02-97c9-4d42-a7c4-13ab40d11f23", "indicator--14fc506f-dbf4-436d-96b5-186f43995719", "indicator--d9bd1af4-4e2a-4254-acc3-a1e238c2234f", "indicator--bfb9b807-cf55-4fdc-925d-ec5724c51955", "indicator--9e0c41cc-6fc9-45a9-945e-960e0d4cdeef", "indicator--fbaff460-5160-4ce0-94ac-54589c1dd3fd", "indicator--53b7c1ee-116e-4abc-a8ae-578add711f00", "indicator--fe7e0120-0488-4725-9941-ffd73e2fa426", "indicator--55e40689-dc94-4e8b-8151-7d1d1142a79b", "indicator--d519bf81-00b8-4885-9020-3461bbaffe8a", "indicator--f53d3e3e-1bf0-4d5a-909e-0f6061c2e0fe", "indicator--89554f15-7a75-4e3d-b561-bd150238571a", "indicator--2ef90dc4-5eb4-4798-bb7d-64a4f72ab8ea", "indicator--3f2c9758-eed6-47f1-9311-a3ac23d6188c", "indicator--9a52bfc6-c602-48d0-83f0-765620f8bdb1", "indicator--992c4dba-eb43-4ee1-8a0d-9da86de96ea8", "indicator--17a64b04-441d-4ee9-bc9a-4fc583dcc452", "indicator--955adaa4-d63f-497f-be9d-202d7ee84b7c", "indicator--2b6c2d6b-9f56-4f4f-8ae2-b89471b0f9aa", "indicator--7ba3952f-1176-43c4-9c1e-d0c6ecb44ad4", "indicator--5b5f13c8-45ec-47a0-93ee-53b34c53ba39", "indicator--df2d1b8b-107f-4137-b265-62c34988cf5d", "indicator--d4c5cdf9-cb0b-4ca4-b698-cf0d470c5c57", "indicator--001038a5-1e43-4ca6-9b02-a6af77219e7e", "indicator--15808225-4c58-4008-aac8-cce76aa345b7", "indicator--6b9ffaa7-ff3b-4329-bc76-19bd39ef62b3", "indicator--783e9161-b1a1-4d40-b58d-5abdb39450d5", "indicator--8114ad68-0c50-41f6-8048-604b6f0bc3d8", "indicator--fecb0fe1-42af-4e65-aa5c-f73ebd2c1e00", "indicator--14a4e99a-3077-413b-8883-da04986c6b91", "indicator--180dc8ae-19e1-4606-92cb-9cf37a04759c", "indicator--f1d8d9c7-cf26-4b8f-8129-33c11b19d59b", "indicator--d9deacba-b931-4b95-8d67-4ab116825f8f", "indicator--4526e9d2-aedc-4c01-adb4-9df88a421565", "indicator--67b4c42c-13d9-4424-b386-0321a1972067", "indicator--a6e54880-b4f5-4b09-a251-bf6f6dbe27b0", "indicator--978b44fa-d694-448e-9837-70cb34162fcc", "indicator--3aa75038-7ab3-4fdd-a2af-a3e8f54f1489", "indicator--f43cdfe0-a3a4-44b5-94f2-32cdd20415da", "indicator--05961d49-f092-4777-bd3c-a2cd6e5fee1f", "indicator--1a6c37be-dcec-4221-9c9e-6de2cae823d2", "indicator--87d8a382-73a4-4583-9422-7ef12ee00140", "indicator--e965c491-6232-4c29-bfaf-efd954340171", "indicator--a4aee9e0-1158-4f0e-b8a5-22abb5ee7b32", "indicator--8f81ef58-7b61-4964-88db-03344e4db191", "indicator--8e434330-a2d4-4fc6-8988-948976849337", "indicator--45214fab-ef83-42c4-a817-3ce3d25c0624", "indicator--2b19a844-d761-49da-b950-6b26e75a2d2b", "indicator--1f75a712-adcf-4c4e-b207-978e506c36d6", "indicator--9d960401-ceb5-4517-a60f-fed50fb6ae92", "indicator--ae9dd72a-5967-40de-b42b-10610838fc62", "indicator--d53c99bd-deef-467d-8087-2884f93758ca", "indicator--e6e8d74e-ab1a-421e-b850-0c7f444f9e63", "indicator--f6de2fcb-5f13-40bc-a69d-5321237caa78", "indicator--990965e4-3588-45a5-b712-acb79e2d20bc", "indicator--907f507d-7539-4ca5-831e-6152b8cee0bb", "indicator--e6d8855e-9d20-49ca-84cc-8017a26a7860", "indicator--2841e034-78eb-4802-973a-182bc63d21de", "indicator--d464f867-355e-4df5-a554-1a94ebc161a6", "indicator--926ab1bf-f394-4c67-8840-ad91ca03c5ec", "indicator--df6f172d-9329-4ff5-b186-2f78932f4101", "indicator--c546f499-b946-40fc-99ab-0bfe39ae7547", "indicator--b0618938-958b-4800-a14d-68aa6d899e2d", "indicator--a54fb0ca-c8d7-4f2e-b006-abf951e45fd5", "indicator--1702fa96-39db-42c9-896b-7be41a0d199f"]}, {"type": "identity", "spec_version": "2.1", "id": "identity--ce3cf5d3-80a3-4354-aa8b-cf328c06c365", "created": "2023-01-19T23:42:59.337873Z", "modified": "2023-01-19T23:42:59.337873Z", "name": "James Brine", "identity_class": "individual"}, {"type": "location", "spec_version": "2.1", "id": "location--7df19b36-9094-4f07-8038-fdc2332b5c48", "created": "2023-01-19T23:42:59.337498Z", "modified": "2023-01-19T23:42:59.337498Z", "name": "Honeypot location", "country": "AU", "city": "perth", "postal_code": "6155"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2039064b-9af0-4dd2-92da-f09c25955aa1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='1.34.127.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.338243Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956ac962-2d18-46c7-9826-438d0a722068", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='5.255.107.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.350427Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c9ba10-1fec-42f9-bba7-670913d0aa3c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.45.72.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.352117Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe523a05-70df-4573-bdc0-65fdbe7b44bd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.45.101.32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.353351Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81735494-8265-47b5-8203-0959f91f4bf5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.47.57.72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.35448Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6341b343-b858-4ab6-a539-2828fa46c076", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.202.28.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.35564Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d68f5c-3729-452f-8535-2b019088c10d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='15.235.163.21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.356778Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58a6817-4b45-4421-963f-758b5babae88", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.193.148.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.358078Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53643605-d8cb-445c-9d52-5cc8b5c93562", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.193.148.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.359326Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d355fac5-b00c-4922-8fac-1873b9829abb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.228.182.192']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.360453Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72306f23-6206-455d-8d4a-71f8124f1d99", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='23.129.64.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.361656Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79266a6-570b-4675-955b-c091d5b14744", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='23.129.64.224']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.362769Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a13ce2d-6116-4f10-98ca-89b042c0da1b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='24.96.238.246']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.36392Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28eb8e64-3ad3-4134-8217-7b9515322e97", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='24.128.124.207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.365145Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd971db-7d33-4b76-a486-b543e20adb2c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='31.210.53.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.366293Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb1a61a-6834-4f11-9d3e-ca67b8befe62", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='34.69.148.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.367596Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c6eb39-3299-4b7b-bcfc-d638a89e24bb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='35.207.98.222']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.368771Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22bc983c-7c8b-4cdc-a982-641b39ef0ad7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='36.66.195.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.370084Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63b6ca1-9281-49c2-a807-0a14c5016ffc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='36.228.110.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.37117Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c75d89-370b-4d5a-8550-b159fcc288ec", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='36.236.29.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.372279Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8943de0a-9c6c-45a0-8e39-0964c99f3430", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='36.239.184.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.373427Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b79b1d-8d26-4334-939a-2e79367e8cde", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='38.87.198.247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.37452Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3faa11-7472-4a08-b33e-38fe175e2f95", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='38.126.114.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.375651Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe77d37-ad2b-4bff-bb3f-9a76881bf8ad", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='40.117.144.54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.376799Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12383241-f448-499d-8256-7d8791daa84e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='42.200.66.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.378054Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2865cc5-e84c-406e-90da-90cd26145fa4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.130.132.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.379159Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8931c021-b668-4a8e-9a27-db5e5c55e3e5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.132.183.192']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.380316Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d02bf2-1603-4c62-b6a4-974d8d61de8f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.134.226.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.381492Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543c2f9a-81f4-4cb4-8f92-d222ea65ab0a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.134.237.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.382772Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44fd3e5-954d-4bc9-bb23-7c5121d1a2db", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.24.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.38389Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c224a1-c9be-4821-a368-de9f5d615d45", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.42.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.385042Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5770707-5d2e-44f4-b778-e80a646c79e4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.43.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.386123Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167b9d74-78ab-43b8-8e5c-4d0c3f89967e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.63.151']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.387217Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4ea94b-b1b2-459b-b357-ed0080bc40fe", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.65.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.388307Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70de1ca-75f3-4a33-8867-622c5e6632df", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.83.132']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.389484Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945a510c-9036-408b-b192-433189610c2b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.112.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.390561Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc4df3b-7586-4eac-b114-e8937c09c855", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.155.173.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.391643Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fec9ef6-2e4f-4ab0-89eb-4f80331cfa65", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.156.39.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.392812Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed397e9a-f3fb-42dc-8aa4-8251def0dc6b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.163.223.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.394129Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fc92fd-7b23-4fe8-9b32-09b99d4aae4d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.8.146.213']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.395233Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966ca930-248d-46ad-8abb-aa590b398d9f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.15.159.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.396302Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2685f3a2-0653-4ae4-b526-4a5a1ff09900", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.44.25.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.397478Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322c20ae-920f-4bc1-a428-e48e5415de98", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.80.64.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.398589Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b564425-0611-45d9-9cb8-e34f464fbc98", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.117.5.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.399679Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b02ee92-973e-4737-a915-efeb2a4b3d42", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.119.81.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.400796Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b42bfe-dded-4700-8551-426b7e515c36", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.24.187.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.40195Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce4b713-bb4f-4539-89ef-b4af377925ac", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.40.118.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.403036Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0083ed0-1057-487b-b3ba-831821e34a9e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.101.23.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.404129Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927f9eff-bcef-42e7-a976-1f73025c3810", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.101.171.235']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.405323Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f021c45-58a5-4334-8e12-1f5e11cadb33", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.107.214.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.406592Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d913ff16-8c2a-4b35-96dc-1876e109f2bb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.49.182.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.407677Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fb1c75-8161-4a39-9384-a48f8174560c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.206.194.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.408825Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aadd146-628b-4543-b7dd-369221d61e9d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.231.241.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.409967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3429c1ed-fdf7-4878-8cd9-38ff5e09eb45", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.248.17.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.411034Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8471f6-fbbd-4169-8218-32c5c94c4c13", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='50.241.219.97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.412166Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e4efae-268c-4586-b911-c8fc19411350", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.15.1.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.413359Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea510c52-57c8-4b4d-bb31-0eeb6a2c7ffc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.83.131.123']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.414455Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b11071d-7291-45b5-a2cc-0093aceec387", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.91.151.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.415608Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e866c58a-38d7-4be1-88a6-30ef590b3fae", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.250.89.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.416734Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a583af11-be4e-4556-98e6-ca31c8eae145", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.250.93.57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.418095Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016064fb-9b74-420f-9d42-400547d75ab2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='52.178.155.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.419159Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a741433b-876c-462a-bf23-ea1ead11cdbe", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='54.37.205.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.420258Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192942d8-c85f-4827-9e7a-f95dc6078e63", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='54.199.140.238']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.421388Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e52753-44d8-4752-a358-44349fb77326", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='58.230.203.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.42246Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c869f121-3591-4876-abcf-4804aedce275", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.4.11.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.423539Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2dc6101-8848-4f68-aff2-5dc0831de7d9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.4.103.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.424714Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75423f3a-8648-4d34-aa8a-48dcbc7695fa", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.103.236.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.425803Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d841745-2e83-422d-bfcb-cf2dbe55bc52", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.120.90.33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.426863Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27c6b37-0125-4cb2-b07f-ef01f2859641", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.1.101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.428006Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181f44e8-084a-43dd-87e0-05d7960aa2d4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.86.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.429207Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08eabeb7-53ad-4df6-ab6d-e0b48548a9c5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.112.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.431338Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47b618c-e0f2-4726-9fc7-120355520767", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.120.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.432436Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde48101-b269-4137-a407-9d936bb65dba", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.163.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.433663Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dd0b0e-60ad-4352-b4b7-a7ccfab5158d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.167.147']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.434736Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e564eb13-11d0-486d-94d8-a5e82dd4a144", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.249.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.4358Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff02ee7-6f4e-41bd-a2cc-2e3dc0b90888", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.37.0.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.436923Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c644bf0e-dcb8-4a0c-8e6f-96d95d4a84f5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.60.166.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.438156Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa72435-3f1e-4587-a7d9-20360a0242e5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.73.37.115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.439241Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a8fdfa-ef0d-47b3-a20f-f430528c9d26", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.93.240.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.440305Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d796b8c6-4b59-40f9-b4c0-b6a7e7945e9c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.441455Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bf6082-9860-4858-bf20-c5de9f5a0015", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.44273Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf16df5-52d3-4986-a1b2-d800145f314c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.443796Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec44161-3106-4afe-aaa9-5a5071a447ce", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.44492Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1274141-494d-4b4e-97a1-8736adf6c773", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.445985Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0d6b88-4f6f-40f6-a036-05f04652d8a3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.447038Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df215fb-79fe-47ac-ade1-c95e7797020b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.448132Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eee9cce-721c-4447-a679-975feb4bab2c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.449328Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d25655e-af00-443d-aa3c-e0aa0bc8d22d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.450396Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ca90d8-cda5-43d6-b411-377ce7deb031", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.451457Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9930eb6-cc09-416e-83b3-68e55f318566", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.452579Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb3ec7e-e9fb-4007-a57d-fabbe1d319b9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.453816Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73482570-c58a-43c7-a7cf-3897c4c5692b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.455077Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c853af9-af03-41e1-8cf4-6b71a17f795f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.45613Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22d5033-dea2-44b9-943c-6f557961bcf8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.233.50.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.457289Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97af870b-9bcc-4706-ae88-76126b08be23", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='64.62.197.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.458371Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df51137d-7b18-4773-a41c-1eca386530a3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='64.227.46.127']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.459428Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e488d3d9-5720-4f47-beef-3f51aa463e88", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='64.227.99.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.460502Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c3ad5e-1316-48d7-9e72-b31c052b0e8e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='64.227.138.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.461659Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c282b6-f557-4dfe-bce0-ab2d1cd75e58", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.70.208.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.462761Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39be3b46-c7c7-4604-b64e-7721764f0ee7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='68.111.155.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.463842Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440f468d-cd2e-4e87-ac0e-322dbb7cd07d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='68.183.56.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.465011Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fa231d-7439-4797-950b-8da0db8a8661", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='68.183.188.159']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.466345Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e46208-b968-4bf2-819c-a798e9ffe5bf", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.167.52.254']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.467428Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead287f9-0523-4bc1-9089-8848ac34d832", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.176.181.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.468742Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fe54e4-f88d-443b-b92e-69865ad6aa6a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='78.139.216.115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.469854Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bce47e0-a3ed-431c-8dce-e11ba65935da", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.52.4.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.470909Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b8a00b-dbcf-47b5-818d-ae88da3cb89d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='81.30.162.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.471969Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbec7ba-efa1-4be9-8f68-2ee1c20f6673", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='81.214.75.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.473275Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735af6f8-a8ca-4e77-b3da-95b79fb7f8fe", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.170.109.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.474331Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1234876-0405-41a0-ad17-77d3a7c8f8be", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='85.15.176.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.476082Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1dd39ad-3669-4aaa-a0cc-910f367c66e9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='87.80.150.130']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.477965Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2876c51c-ce81-4665-a909-0927c5713b3c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='89.31.32.115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.479827Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2c9e12-b736-43ae-b1cc-ca2baa0c6c52", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='89.40.72.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.481966Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf1a522-65ee-4fac-8ed3-bb791fd0d092", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='89.121.153.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.483747Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4918d66-ce0d-4a18-969a-5ebce4f20b77", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='89.147.111.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.485614Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80628c7-3687-4e3f-bdea-5b79e41cc5e4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.122.197.235']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.487419Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32aed243-219a-422c-b28c-0d9f666d210e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='93.43.231.181']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.489572Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912204ca-f716-476b-bfbc-cba076cf72ba", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='93.151.252.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.491413Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcfd717d-a0c5-4a1c-b6ba-399002f0c2a2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='95.14.132.60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.493281Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06f0da3-827a-4832-a440-204801b5b5ec", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='95.235.201.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.495068Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639b3a23-45b0-4e4f-8a56-693e56c48008", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='96.83.24.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.497027Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4039b289-d585-4b62-945a-55441ac4840e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='97.74.82.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.49886Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51356e36-12b7-4100-a14c-c4384364fa21", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='101.108.6.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.501004Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a881cf-81f9-43c2-8bea-315e5a9f406b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='101.109.163.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.502785Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f876e4a-9dd3-4e7f-b6b7-94c0d0891833", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='102.130.127.117']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.504632Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8daa28f4-3503-47e5-af20-92d3aa38b489", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.97.247.139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.506481Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fc6009-6531-4259-8a1d-49b7cdd80ebb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.104.111.34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.508248Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e7fb3e-8701-4186-bd96-a1dce0450573", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.139.192.159']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.509855Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3116878b-3d55-4642-b6e9-018af8c3c7fd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.171.84.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.510977Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05226af6-35b9-4202-94e0-22ff505c9610", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.181.142.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.51206Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9d3ff4-95e9-4227-9e54-be247e5e6ac7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.40.64.232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.513275Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2529413e-20ba-4761-a9ed-2227a2e5cb8d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.157.26.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.514313Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7abfd87-d76f-477c-be7c-fef9d93855d6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.186.204.146']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.51536Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df794ee-536b-4a14-96e0-53276a7c56c5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.248.138.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.516696Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa0d882-e071-49a4-a096-cbcdfda020e8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.248.146.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.517788Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072052e4-3130-431c-8360-e2ea9126e678", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.248.239.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.518851Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd966684-b2bb-403c-b2c0-797cbdee6e58", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='105.96.11.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.519902Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76b1cd8-4492-4de6-84d0-c5286459b8a1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.104.134.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.521042Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb82ca2d-a020-4cb7-8380-b94a3fabff96", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.248.246.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.522098Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edd0e2a-1588-4e55-939a-0e216b9ea947", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.172.218.217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.523168Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d859ab3-b9d5-4767-ac9d-fbe90f2928b4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.189.4.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.524254Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1243b06-2b59-49ed-af0b-99c5a1485c9d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.189.30.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.525411Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070ef90e-8cbb-4ab4-aa8c-9d2eda734888", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='109.148.112.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.526492Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f2d259-5158-4118-9655-0f0ab4b0eaaf", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='110.49.76.244']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.527993Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92d1d08-4457-41b2-864f-8e0cc0ce5a96", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='110.136.116.255']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.529152Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddaf5e2-1fb2-4a73-9d6d-54a803504a1b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='110.171.28.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.53021Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c2367b-d8ed-495e-82b2-883d712cba07", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='111.242.38.200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.531261Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0719d696-116a-413e-972d-8b3bcc164767", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.145.175.100']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.532404Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f854e2a6-0a14-4342-9b92-b8d6daf046ee", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.161.129.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.533615Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bfc86e-f5b0-426c-a1cc-1123c65a9d12", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.161.188.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.534665Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7358d63b-806e-41f7-8a51-e75e8581b9a2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.161.214.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.53572Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720344fb-ef18-40ce-8c58-020bc01cff76", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.186.24.196']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.536894Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f05c056-3f51-4a98-9edb-7772e876729c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.32.189.134']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.537995Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655239ba-1de5-4c4e-915a-b65670508b1c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.32.246.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.539083Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd591705-66a7-464c-94da-89f434e9be07", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.125.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.540316Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d27eaa-0180-44f7-8dc6-c0ea1dc22fa1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.195.101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.541456Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9f5470-5ebc-4147-a42d-7533475ae69f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.224.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.5425Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c5e145-72c8-4f69-a1f9-0ad52c56a27e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.235.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.543545Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13069a1e-3a62-489c-81e9-4e513808a74f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.34.194.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.544629Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172d991e-ce08-47c1-bb7c-4daf6c39e999", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.35.82.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.545713Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321fb9fc-0f63-4268-a060-0f256d60992f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.35.100.235']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.546782Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7de16f-329f-4576-ac2b-435e4674df43", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.35.155.115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.54785Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88653fb4-097e-44cf-a87c-4f5d4481bc6b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.129.98.159']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.548996Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a57825-9bde-4103-ade6-0086a090d5fe", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='115.37.105.173']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.550095Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d696a918-8237-47c1-beb4-ad81d3d16067", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.35.125.107']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.551324Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e31d00-88f2-4838-8867-99680090bdd8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.47.181.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.552402Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314e91bb-4969-44f0-adcf-74c06108db83", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.70.180.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.553579Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d3bb98-ac59-4de7-b742-239cab220898", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.70.180.189']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.554639Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c87818-08a2-4d28-8d40-dfa87f880d9b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.161.130.13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.555692Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c304c4f4-72ed-47ed-a1b2-37f0241f8bb2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.163.213.78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.556857Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea89f831-0716-4ebb-96e1-a145ca4631bb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='119.194.162.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.557931Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5854a95d-9a2a-41c2-b22a-045b6368ff60", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='119.196.161.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.559009Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1cc83f-2f94-4f45-9afd-78f1e572e8f5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='119.201.5.13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.56007Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e253797-c5b2-4e9c-8978-67da91b3cab7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='119.207.10.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.561228Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938f2ca0-6147-470d-a90b-6d733527eaf5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='119.237.104.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.562315Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3c6e3b-6c05-436d-8776-1c805c1efeb6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.66.254.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.563536Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909658f5-857b-4435-b725-af0dd8868cee", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.136.151.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.564657Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a8d833-29ba-40b6-b771-4ada3a87afa9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.146.53.238']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.565745Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b341561f-1226-40ad-baac-15b0b0108946", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.153.203.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.566794Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c3bcd8-d3bc-4ea7-9120-f7c25b0a8dc2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.185.177.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.567831Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e7498c-7bac-4034-9e08-d4f0a887ab85", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.187.90.250']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.568967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64048173-be92-4076-a78c-c819720c2e03", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.187.229.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.570046Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8c71fc-7ce1-4337-95f9-eeaaf0d42ee9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.191.217.92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.571113Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518d2dc4-66fa-40e7-9c9a-07a5499e21d0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.116.75.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.572205Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca9a633-7674-44e2-a332-052fe92442d7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.118.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.573383Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a02ec4-ed8f-44a4-889b-5d4b146de20f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.154.48.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.574738Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75100908-04d7-4f74-aa96-2a71ad7a27e9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.160.62.57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.575825Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b13c61-2f25-49c4-85eb-ad196f70e8fa", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.160.68.57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.576973Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec0ba05-2ec8-4c8f-b7ed-9218327ee52d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='123.231.217.92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.578049Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ea66d5-89fa-41b7-acbe-db7fe7325ab2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='123.240.248.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.579105Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc70f5ef-c908-4097-a1d3-74f6e1d1d112", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='124.106.227.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.580194Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76241f44-5080-4b64-ab05-7aa06d123534", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.228.29.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.581341Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0782571a-52b1-4971-8d9c-72ac6558002e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.228.160.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.582485Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5915bd95-957c-4ef6-80cf-0144243f453f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.228.181.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.58433Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe32c358-e24f-4147-b4d5-53190e127848", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.229.17.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.585571Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c882b692-a135-4f1c-b2d2-f60fc7701f2d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.95.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.586809Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bd0546-4722-4a9d-9ddb-b0e84c8e5f92", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.115.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.589669Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30466877-481f-4684-bfba-e7ecd2205c65", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.177.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.591464Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968fcffc-1ff8-44b2-8878-d627d077c873", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.126.215.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.593107Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7332aa7d-8913-435c-9ac6-d509303b344e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.146.242.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.594941Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694864f7-853a-4e1e-b104-24ece5da455b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.150.37.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.596484Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b1529d-4e1d-4073-aeba-0c9e3e8fa56f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.154.217.134']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.597676Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd8072d-d1f7-428b-b013-876c13867815", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.17.16.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.59875Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94290ce6-0a4f-4523-b63e-fd0ca05da347", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.122.91.0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.599816Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860d08a8-1d85-405f-808e-cde1402c3086", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.209.79.45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.600959Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a235230f-6fb7-4a3c-a0e2-8a002c03ddfb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.209.162.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.602562Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbbca6a-b03d-4a26-82cf-a3ed0bc66d24", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.209.190.88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.631339Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d0041d-00d6-47a2-a3a3-bfbdb7925d82", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.219.69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.632973Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c884708a-4f3f-469c-9c41-4afd7264d3dd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.225.34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.634161Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40265d1-5376-4d4a-ab55-87f832b50370", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='138.197.10.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.635284Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f259f5-dd0c-4e63-bced-f10a56069463", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='138.197.66.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.636375Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d983c4-c63b-44ea-98d9-3e22b86b7ed9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='138.197.195.123']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.637554Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982ea0b1-68ca-4e1e-9c0d-5064d24f0385", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.78.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.638632Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972c00f3-d622-49a3-8c61-606fb05a1b03", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='140.83.51.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.639722Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea6d58e-d767-4ba6-b0b9-a0294691b90c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='142.93.217.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.64087Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989d12ea-58ee-49fe-864a-2edff663d581", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.110.221.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.6421Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a159ee3e-2188-41e5-9524-572603eea46b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.198.209.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.643155Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34509529-c185-4884-8cc1-623ff34d2eac", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.198.223.217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.644235Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe3e0d9-20f4-4392-84bd-ea10ac43e078", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='144.126.209.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.64537Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b093eb0-e0d1-40ac-9506-dfbc3ae8ff07", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.52.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.646422Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6258ee-aba8-4f71-bcf4-d85249169317", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.55.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.647529Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33204d35-119f-42c6-a97b-0f8a0bc37f02", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.182.228.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.648688Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1058a46a-d9a2-446f-9707-4e9671e24bf5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='150.136.242.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.649792Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76697344-9972-4ab7-9bb6-09a07bd47681", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='151.56.176.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.650862Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69184ae3-0b02-4cca-bb8e-82545ae9d13c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='152.32.150.9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.651914Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80612f1e-3956-41bc-8897-cc259e0fd792", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='153.222.114.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.65339Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f68238-f368-40c1-8f01-802b0e859de7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='154.221.17.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.654537Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1e700d-c1dd-4d59-9ccb-7ae79cb3256d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='155.248.204.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.655882Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f203546b-1b4a-4ca4-a655-a0861c03efc6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.7.67.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.657115Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8529f67d-e381-47f0-a536-dbca35ab83a4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.7.192.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.658291Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b15addd-b86d-40d4-802e-a46bfc28bf3a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.230.36.91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.659558Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854a6766-d5d7-4be1-9b2c-48e57ce1afa3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.245.129.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.660826Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b6eb6b-1b22-4f77-b356-6f0ae8fc90d2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.27.32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.664144Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37695976-8a5c-4e1d-bd22-2f8813b7201b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.203.10.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.666135Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75b751c-1163-4483-996e-d84a8f44b5c7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.203.66.111']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.668176Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1566bb-2b46-4530-8fa9-a5c04d947464", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.74.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.670416Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a667672-baea-46fa-84f3-daf0e438fe0a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.95.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.672259Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8e2858-ef04-4951-bbc4-a40a5bc57815", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.121.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.674097Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821cd148-7ba0-44ad-a932-4609e11762a8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.196.187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.675829Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72920c6d-79ed-4897-8f39-1602515de609", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='160.153.252.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.677607Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f2e727-4865-4ee1-ad1c-a86dc8f23f08", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.35.65.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.679326Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa40b44-b9a1-4788-a104-728acdcda221", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.35.124.45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.681124Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69503b5-ecca-4b3b-b83b-eaa9f845251d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.247.74.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.682887Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac7ff3b-5866-430e-aa1e-93887fbd8b57", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.247.74.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.684633Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69cc06c-1e43-40ca-b64d-2756933334c2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='164.90.229.196']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.686435Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d223f59e-727d-4971-977e-7dca3b44c358", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='164.92.118.96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.688133Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20bb3432-f2bc-4e85-b0f4-fbe7adf54002", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.22.62.203']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.690128Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f502a159-dd13-4c05-96ff-e9c212eb3af1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.225.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.691492Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f250ffd0-687b-45ef-8845-5ae46fa832b7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.240.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.693079Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94df9c82-cce3-46ef-beac-eb95bdde22b0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.244.111']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.694612Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a5914b-c048-45fe-9677-bc20bf450ab0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.227.103.128']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.696129Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d721ded-d69c-4d94-b7ac-b71fc586bb46", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.227.211.13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.697761Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8ffda2-9dd6-4d89-a620-0ae4721ab187", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.99.114.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.699279Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed76c273-ce5b-4863-8654-bbbb319a3054", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.99.119.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.700791Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf14f1a3-d7f8-4545-bfe0-07a2df6c895b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.238.162.191']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.702291Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9188c3-2447-4e74-b209-f129945aaef1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='171.4.0.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.703819Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38d6a64-c917-43dd-b57a-23a4b60b7d1d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='172.104.68.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.705594Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b28ef3c-0193-44d0-a544-5b1540d84ad1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.203.173.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.706742Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313d2e0a-4d17-4930-94d4-4094ed928c3b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.207.13.86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.707763Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12ffb7e-6cf2-404a-be57-ac042baff8f3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.210.150.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.708826Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97223588-15cd-48aa-8a3e-c48f2ffed642", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.111.173.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.709934Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce30b26d-885f-49d5-8917-3946b579d18d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.111.174.211']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.710987Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c48cc0-584b-478a-884f-349b7851e012", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.213.141.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.712012Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185398f1-f7b9-4a93-826a-28af4c56a59f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.76.253.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.713185Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53751c5e-0e3a-4bf9-ab65-4d677018d519", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.93.51.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.714261Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb65a3ce-375d-483c-96a7-8276f8c98b34", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.200.212.34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.715302Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e65573d-ca27-4956-9da3-3a237946e2cd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.62.224.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.716388Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d3e1b8-0f8d-45aa-9997-08ee6f7e96b5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.128.19.209']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.717745Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f7a764-522e-4ce4-b932-9445665bbc61", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.134.60.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.718778Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020a237e-4dbe-4349-8331-a2ba19687e63", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.154.229.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.719802Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e20bd2-929a-4543-8c77-eb0825ec4149", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.32.44.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.720868Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1afe70-adb3-4155-bf9e-6a28af2472c9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.43.159.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.721943Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef739fd6-7cda-4beb-a178-0212332c79fa", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.83.182.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.722965Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e20a52-96a6-437f-8356-29148b9a7375", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.177.242.211']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.723994Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48357b40-b1d7-4dd4-b566-2c46903e5448", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.183.66.120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.725187Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a455269-752a-4dfa-9a3a-9fb8703ac5cd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.231.72.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.726246Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a5d222-0c37-4753-8b37-9b15feca6661", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='182.16.245.85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.727374Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e999df29-cb8d-4ce0-9fd9-0381258647be", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.88.244.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.728643Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09fc16b-d79f-420d-82c4-32ece77bcaae", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.103.215.209']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.729756Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94c1c5a-55db-4025-8bf9-5444d4673289", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.107.195.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.730824Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b77a6a3-135d-4762-b06a-18752c007d3f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.108.66.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.73188Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560823f0-0207-41a7-ba9e-4a7cd7bece24", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.38.175.131']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.733Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05169686-c13a-4131-9170-a7b12154121b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.81.68.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.734049Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d85c04-1d0c-42ba-b692-14bbbcfb4fa7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.100.87.129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.735101Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406461b3-398c-4547-84eb-d9f9c837ef69", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.129.61.129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.736195Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b15b7ac-36ef-4546-b53a-0ba59d3b9202", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.134.213.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.737334Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e5011e-d509-419e-82ef-197e05689400", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.182.105.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.73839Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d1d969-8527-44b6-b5ed-ec9a16486112", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.220.101.149']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.739439Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e142d359-a2b2-49e8-b33c-1f63610755fc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.220.102.247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.740671Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f83747-d7aa-4c58-afaa-99eb432b3b77", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.220.102.251']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.741716Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5daa4ee-633c-4f66-ae05-80bed2d05b80", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.220.102.252']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.742749Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93eb4ddd-3bf7-4700-9ad2-b82a3509f173", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.220.103.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.743776Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc6c92c-12b1-481d-b8c2-ff58cd6588ce", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.220.103.9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.744863Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de70799-1fc6-452f-a2ef-0f1d3cceb905", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.245.94.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.745943Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46054aa3-58b3-40ce-9763-f3826b0ea68d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='186.31.95.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.747004Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b58b6d9-0093-4067-9ab0-37326b2c0108", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.162.7.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.748096Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f51875-a918-4d36-b1ad-e882d2457406", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.166.30.235']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.749251Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232025a4-1d2c-43aa-8548-e195dacd4d8d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.166.58.179']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.750365Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791cf316-a9c2-41ed-a5a2-d3fae17d32fc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.226.34.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.751556Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19e7356-7ee3-41c9-bd3e-a45a994a31a6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.45.78.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.752638Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706d8549-4def-48c3-af3c-6f64c6339288", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.195.223.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.7538Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e9ac74-c3b5-4ef6-9208-28620347de98", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.224.154.251']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.754842Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dff95ce-06c9-4031-9bb8-5600d94c842a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.156.231.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.755919Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127d6020-528d-46fc-ab06-667679132d22", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.190.166.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.757053Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37e67a7-9799-4918-97b4-028e6ed2a4ad", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.217.69.202']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.758112Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc15b048-7cdd-4f89-8701-ef91ab3d62a3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='191.34.125.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.759164Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870feafc-3fc8-4d91-80e7-4a4dffd1b2f2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='192.99.59.56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.760209Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ed1007-6031-4ccc-a3d2-3fc32318b7c9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='193.107.248.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.761339Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdfeda5-f988-454e-8b02-182ab63820a4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.110.203.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.762407Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96001fbe-a74f-481d-9bab-253fc9fff6a9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.169.175.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.763741Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d1595c-8ded-4c9f-9967-afefacd683b6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.2.81.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.765023Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf97a11-99a3-4583-956b-2a96d7df2082", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.33.237.83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.766162Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c28a14-8c64-46fd-a85d-346c827c1815", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.226.194.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.767195Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863ba504-8bd7-454f-bece-f7cf9286856f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.226.194.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.768345Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62b57b1-491b-444d-9ba7-2962f56c1098", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='196.221.202.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.769489Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867f6f0d-b9fe-4a03-aa3c-3943c0e66ec4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='197.5.145.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.770581Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8b76ee-2ab9-4006-a6e7-c8edea2ff78a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.27.113.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.771597Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ee3386-b42c-4d4e-bb30-38314befeeb4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.70.56.202']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.772685Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be4b24f-0fed-4ca2-94de-ea259492bf33", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.73.138.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.773785Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d029c2-2ceb-47e8-afe9-5c1808f1783f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.159.243.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.775009Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7889d0a2-8ba0-492f-b30b-e30d37287a77", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='201.45.248.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.776167Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f726cc92-a6e0-415e-912c-be3f8a5cd349", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='201.48.76.244']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.777271Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9c3e83-be4b-4b08-8a5c-10c2298d41d8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='201.48.78.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.778375Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e41e95-e25c-4e80-842e-0cb9e0683c62", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='201.116.3.194']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.779397Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad16a707-0a28-4e5a-91eb-f37622dc9dac", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='201.137.74.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.780414Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885df601-45ed-48d4-8461-efd3ea338fda", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='201.236.181.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.781512Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f6b8a9-faa6-4ce1-b18d-6b33f5482183", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='202.46.29.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.782506Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655f420d-2645-499d-bc04-4e05f58ae127", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='202.165.14.181']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.783494Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bccab08-ef1d-4971-8bd9-9292a53bbaa5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='203.101.126.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.78451Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55aefea6-7774-4361-938f-d905dc3a3988", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='203.174.57.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.785682Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f1da92-38c1-41bf-abaa-2e90bbcb4851", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.185.113.129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.787315Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c2bbb9-247a-4bc4-a443-265f21bb94b4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='206.189.57.56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.788431Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d6a76c-7a9c-474f-9b9c-fab6a8dce295", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='206.189.66.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.789526Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3193201-809b-46a8-875d-c2ec8237234a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='209.97.173.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.790545Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2766f848-23e3-483e-8511-b19fc63bed7a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='210.64.73.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.791536Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0dc461e-d561-442e-983f-38c548d1ba50", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.20.138.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.792529Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2535dc72-c60d-4024-a297-2595868dd230", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.44.212.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.793613Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac69d9a6-3f94-48ff-afb5-d09626646883", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.75.215.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.794626Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec3153c-0467-4197-9622-522bdfd3b82f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.220.47.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.79576Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4c9666-330f-4b88-8b25-9c5e2d71c45b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.225.148.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.796808Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd631691-78e4-4a49-9b1d-014cbe3b5030", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='213.6.118.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.79813Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b2c2d4-1aee-40df-902a-5d5918660fdc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='213.6.144.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.799135Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b64213-f5d8-48b4-9892-677cf95bea3a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='213.27.189.252']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.800141Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096e8bef-03e4-432e-be3f-088190424d5b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='216.10.251.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.801234Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629bc096-20f0-458b-93a2-bf68756b5fc4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='217.94.218.250']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.802237Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b1a7e1-7d21-4884-8b27-cb51caf1c0d8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.145.254.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.803236Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b330c4d-52e7-4a81-ad5d-a50a0185a2c9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.161.7.239']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.804255Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575994b7-14eb-4684-be51-0823f44c75c2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.74.66.167']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.805421Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3a002a-d40e-4690-9e39-0902b5b71953", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.76.92.72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.806441Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9374fe6-d4e8-44c1-99ba-d6621a744881", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.80.142.228']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.807539Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e9b8b8-d8f3-4db3-a0a2-69342cf4f7e3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.84.88.128']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.808564Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04cc655-bb66-488a-9ee2-c7b3950d43e3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.88.1.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.809805Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8892dbc4-2a83-44dd-87f4-b9b48af8fb06", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.119.119.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.810849Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5951754e-9183-4895-9276-39044ef4b005", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.171.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.811856Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297700a6-4ca2-4226-88e2-beac02619dcb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.185.232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.812928Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3c3e7c-6061-4502-9eec-6100bac18ef6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.133.108.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.813985Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761228bc-452f-43f2-b0f2-92a83a6f48bb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.133.159.71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.815142Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84e5ba1-cf5c-48c8-8776-39d224e28b22", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.68.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.816159Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bff2e1d-4ce9-4259-9b2e-8430178640d1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.80.92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.817431Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbd8414-7236-47df-bb5d-f88ebc4e4c50", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.253.147']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.818445Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ea215c-f986-4ce5-bad1-32bfb91395e3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.135.0.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.819467Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27f7f7f-a958-4ea3-9be0-8d6cc8ada221", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.135.10.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.820667Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d27f37-a76d-4a04-b99d-5f07bd53fa08", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.135.133.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.821741Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da21cbb-6a13-4682-aa24-3c6653d77320", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.160.138.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.822745Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04641904-ab1a-49e1-9b5b-4fe899ef2eb2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.97.131.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.823747Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad320bd-11c4-4b12-b5d3-e87187b7e654", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.113.121.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.82498Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f53c7a4-c522-4058-b9b3-5baba10c1379", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.197.125.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.826017Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b22df7-ea36-4d59-8399-5bc077e3a71d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.218.225.146']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.827208Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4084e93f-3585-4ea7-b6d5-6f1c86b1e8c3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.148.10.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.828226Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57deb891-f645-4a16-ae76-2109565f4749", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='52.73.169.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.829358Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7b477e-fc69-4cb5-b1d1-02bf8fd72211", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.42.19.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.830393Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87cf4a02-fc67-4575-8ecb-419c053ee096", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.831393Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792fff87-4e10-445c-9919-f7b00a578822", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.203.255.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.832611Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6890210-a77c-49fe-8de4-18feeab71d62", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='154.89.5.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.833661Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d53a09-c708-4c6c-8893-6a30506fec6a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.243.129.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.83491Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e0c91c-5fc4-4ea7-8a73-15be652243b8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.243.134.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.835918Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecf26e5-3b1f-43bd-bf24-b23c12c95830", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.248.133.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.837128Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd61e87-b2a8-4c0d-944e-94fef401ed97", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='184.105.247.244']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.838129Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ecf4e1-c16f-40c0-b362-5ff93ea3053c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.94.111.1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.83915Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d006331-c96e-4424-a2ca-b9ae3385489b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.235.24.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.840171Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dbbab8-7d1a-4fee-a3e5-13df1cea0625", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.210.31.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.841273Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2dc31e-0843-46ef-95c5-b6bdc4a847e5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='209.97.173.100']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.842338Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55667c9d-e871-4921-8f51-d883e7135da2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='1.34.135.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.843523Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227ea702-1218-4710-9ea0-0b476cda3aa1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='2.85.41.130']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.844595Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8046c686-63ce-4942-b3df-5c60b632db04", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='12.204.87.197']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.845755Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08ab64c-5f48-483a-a3b2-a673f3bff0dd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='13.67.221.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.846791Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ee23c2-93d2-4554-ad2f-30525a242ad1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.246.42.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.847849Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faae5262-b01d-4a24-9d5e-e9b4fba2c60f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='23.94.194.115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.848962Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cbb64d-aafb-4104-afbf-894a7baa3482", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='24.214.132.125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.849998Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d08cb0-52e6-463d-88d9-3a967ef21776", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='31.209.38.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.851035Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775f9e8e-2475-45d3-8d6d-e69f261aafc7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='34.80.217.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.852111Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27ec28b-473b-4ae9-96ec-744aaeb22f1a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='34.100.249.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.853241Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b143d26b-cfa3-4d55-972f-c292d99de953", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='35.198.39.236']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.854283Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b73d8e-34cc-4dbc-9dfd-e3425ef27717", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='35.222.117.243']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.8556Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda330c9-85f0-4d79-8878-e8b9150dcaa4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='36.91.152.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.856672Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd39705-cce5-4ce5-a28d-59d9087003b6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.139.15.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.857763Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6bf0a4-c2cc-45f8-adc6-59310f83054f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.221.65.251']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.858863Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121f6a3b-6afb-49e9-9176-ce94bfd9f4bb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.129.216.151']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.859889Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe45b5c1-6937-4be4-988c-4f24c23713be", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.130.62.223']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.861005Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80d6a41-77a8-4c05-aaae-97d8188e71ad", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.134.237.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.862034Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25068c2d-3e34-40af-bc32-ee306cd7ec1f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.210.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.863084Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6873ee5e-9df4-4c48-b78c-59c11364b591", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.156.31.54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.864192Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820943d5-c756-4419-8ae5-03bcf8173024", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.242.101.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.865311Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357016a1-5dcd-4874-bbf3-2a345030865a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.55.153.251']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.866649Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e1c788-0510-47ae-9535-1d53433151f2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.82.122.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.867667Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb410be9-b6b3-4848-a566-5355bdb96b52", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.95.146.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.868799Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85e9ae9-4af0-4aec-8519-769292d22b86", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='47.157.236.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.869864Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe72414-4502-4991-892a-851fbec02ab9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.88.112.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.870922Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee14befe-b74f-475e-90fc-aa92f55fb58b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.213.217.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.871939Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853ee737-0bca-4244-8b42-ce97265cb026", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.213.248.195']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.873047Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb2eded-084d-487b-8e48-2966315cae77", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.83.74.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.87411Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3168876c-0658-40ea-beb9-c682870cfc0d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='52.140.61.101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.875178Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceae8b07-fb19-4d53-9f2a-88fdbdb3d902", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.25.17.86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.876201Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b719a72-0326-42c9-b729-672fbcc22f51", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.30.232.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.877409Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be4dc61-e6bf-4b82-a600-fd0fa69d73fd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.60.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.878601Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48980a10-0b08-4412-88cc-71316f3ef2c0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.114.250']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.879733Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4eccc1b-bd3c-46b7-a498-c0e51a2ee5f1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.127.128.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.880792Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0550767c-7279-4a49-8546-089d6300c045", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='60.220.185.149']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.881858Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982d73d3-4ec2-4cb6-ac1f-2c8ff998aa73", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.28.229.167']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.882881Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c205c85e-0e7f-4046-81c7-21c24270ef08", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.883907Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d88af77-8292-4f1e-9bac-f66bfc8b66f2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.885049Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26f4358-89bd-4fac-b26f-3fb236eade78", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.8861Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c196eb4-3266-430c-89bf-0a1e7dfbbd3f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.88717Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3338618-8e92-4d49-8ddd-a1970b081e10", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.888297Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f6e038-a564-4f10-9a62-7bab2d2d037f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.889567Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc03f98f-ad7b-4bd4-96a4-22c0fb26df88", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.890707Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f18b54-e2ef-4820-9101-85c33e9a67af", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.891733Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300fe2c6-feaa-4b80-b751-a142f788246b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.892807Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68376e29-ebb7-479a-ad2e-400acd1cebe7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.893948Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739e6ed9-e94a-45a2-80c6-c4a9c31d6ffb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.895003Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f746fbb4-ed17-46fe-af58-569f76449870", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.896036Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9b698b-9812-4be6-a534-2d96d34479b7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.897162Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c0fa86-fefb-48ba-ac4d-847f04f8d3e0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.898281Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c569fe9-9527-43b5-beba-207b361afdd1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.899343Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c04a8e7-6d92-493b-bed7-3b5931f2aaa8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.900473Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984605c9-00f7-49ed-967a-d043efd12236", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.901757Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374f8813-85ba-48f7-a86d-7db9579e7050", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.90278Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf10da0-de7a-4d20-acdb-74c3660ea042", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.903798Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5923131-0212-4203-92d7-19b44d842b70", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.227.224.207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.904864Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d99d0e-1e26-4f5c-85bc-1b91b8e60909", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.84.119.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.905937Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5efd789-0f0f-4c76-b788-639d81b615dc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.70.190.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.907011Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15358dd9-93b1-4eb6-9ba0-791ed3748446", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='67.205.185.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.908127Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf25e3fc-574e-4bfa-942f-eee783f6cfcc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='68.116.41.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.909263Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b109f111-5074-4263-a595-b03e91568ba9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='68.183.212.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.91038Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea8a2f2-8cbb-4b4f-880e-fa7b955e091a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='71.25.125.233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.911404Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bfd4e6-7b3b-40f0-85e3-5cf192774781", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='71.70.219.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.912751Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad25a29-d9bb-40b0-8aac-4f521a16c20a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.76.221.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.913882Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de099cb-c93f-4e98-86b5-f0621fe0b1f6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='73.169.34.21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.914912Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fae553a-f158-46de-826b-75b144de3e54", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='73.248.213.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.915931Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d9684b-7dbe-4b5c-ad90-5cb6b4bc6335", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='77.104.75.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.917034Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be65090-aa6e-4638-952b-bbdcc4ba8e75", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='77.171.127.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.918152Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88dc5561-7fac-4ea9-9874-fca41cb45a6a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='77.185.60.117']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.919268Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85208954-7b76-41da-97b0-0183e041f54f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.106.12.211']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.920339Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094cb9dc-8153-42e9-9a51-751371dc57d6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.14.45.217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.921484Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92720cf-8b25-42df-b0f8-6ac58e70dc7f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.19.204.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.922525Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d61937f-ad34-41c1-8adb-f5179d577a24", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='81.30.162.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.923559Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff65e15-437b-4846-91d8-0d4c3716bf86", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.64.139.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.925276Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dedcdc99-8220-4338-b60b-7b92df67450a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='85.237.46.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.926301Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e80092-f433-423e-9f55-255b7a82f2c7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='93.43.11.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.927316Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc57261b-392e-4891-8463-36ac128f48f1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='95.79.45.205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.928419Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e9f58e-8995-4ea9-a8bc-e21b62820682", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='95.80.67.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.929512Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d62f55-f565-4410-b2c0-60ed66b42023", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='96.45.167.246']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.930607Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcd7560-557c-4d8e-bde5-03af0fc8a3dc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='98.181.106.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.931645Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f5ba93-e2b8-4495-a726-32cf051b802c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='98.248.92.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.932702Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04fb3c6-560e-4165-b6ae-39629fea6c08", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='101.207.113.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.9338Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32df5313-af15-4b28-bcc1-613fd2053789", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.17.9.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.934829Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d193e1-14df-4602-bbfc-b5fb34544ff7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.56.114.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.936023Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9585806-138a-440c-a95d-f2e896c5a70a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.86.49.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.937136Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc39af74-1d3e-4baa-ad08-2c7409d7cc81", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.96.75.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.938294Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1115f9fc-5453-4d00-8fbb-19bafbf5401c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.99.178.193']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.939322Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a0b248-ce66-43cc-b2a4-7710d922ce6f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.139.193.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.940467Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39200888-4ca4-435f-b48c-f85176e77d49", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.151.119.158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.941558Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d79b2b-0d62-4e0e-9d47-1fec48086436", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.179.57.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.942575Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1d67b2-47f9-4a3b-8bd9-4dac759a1ab1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.168.102.21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.943599Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b2f7d9-accf-4959-ab3f-7fde93a19796", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.248.146.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.944685Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871459ef-e5b3-41de-95a3-20c69c19fa1f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.248.204.184']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.94575Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9ffd68-23a8-4ffe-ad10-4f746648426f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.51.72.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.946776Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5a12f5-7474-4ed9-9389-9b4c77f0ab64", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='108.190.228.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.948028Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2469c9-72d9-4ee6-8316-383df6befef4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='111.161.124.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.949199Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a88e9d6-fddd-444f-9bc3-8099eb8823ef", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.32.84.219']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.950245Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39568117-1d61-431f-acee-7819c59bfc24", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.112.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.951383Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc9c90e-67b1-471c-afad-bf86e7274c1c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.35.182.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.952439Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382a6885-99f7-44b5-a26b-0a2e8054eca5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='115.68.219.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.953554Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee0ef05-1f1a-407e-92b1-f7ab8d5b12cc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.46.27.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.954599Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4382856e-514e-4975-adf2-cbdc3f1b7437", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.232.160.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.955675Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14ad687-b813-4689-93a5-8fd797b800db", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.65.170.149']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.956749Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db54d4a-aec1-48e1-9f3b-98d7f4814829", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.183.184.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.957852Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0149f11e-059f-43a0-918e-56a134210eb5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.186.222.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.959185Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9a1a86-bceb-4cf8-8d18-7b9b8251395d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.116.46.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.960223Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53189ab9-6f4f-4976-9f5e-91407d81cfd6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.133.43.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.9614Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e8954b-0d61-4fe0-b38a-a83da7387716", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.134.150.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.962462Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc3c2c9-fb2a-42a5-b0fb-a57fde5adf8d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.228.105.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.963479Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18692a7-03cf-49bd-97b0-5f72e1486f72", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.229.152.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.964514Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0facbf9-5fd3-477e-9954-cc35434e2224", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.126.119.71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.965629Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43ae34c-eddc-4190-a48a-4e70188d6301", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.146.241.147']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.966662Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d674f47-de71-48df-b75d-7fe532679916", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='135.125.68.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.967687Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb404b8c-228a-4557-a5e0-f08b40d4c6c0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='138.68.178.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.968806Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dec2278-3a6d-41f7-87f9-540977301f71", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='138.94.172.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.969973Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f60b171-dc9c-49c7-b6d7-c57183b37c06", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.1.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.971242Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4bae99-048d-4007-9855-ec4c1857091f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.39.185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.972269Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817df6f1-b9e0-4079-8b89-7cab9b38529c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.120.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.973467Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931260d0-f41b-4ec4-b5ca-9f52ca98f063", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.255.116.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.974488Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4fe4a2-d6ca-4c02-a207-b2c8e3db4d04", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='140.213.187.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.975518Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51b5c0b-ce68-4142-95c6-196445832ca8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='140.238.179.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.976584Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663eff89-717f-4e36-a979-a6236088d891", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='141.98.6.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.97765Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903ee644-0178-42a6-8e1c-ba905039268e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='142.93.95.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.978713Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c62fe3-3f56-40cf-9f07-470174ce6503", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.110.185.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.979811Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c12b779-d755-44a9-8060-e290f004b383", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.110.221.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.980966Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fceea5c8-b20b-4aaf-9418-53dd9f2a9f9a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.198.79.85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.98236Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388cd757-16b7-4c1f-b965-de567de637ac", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='144.34.212.207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.983392Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9e36dd-0469-4118-b998-8009b4972c63", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.59.154.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.984498Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34aef964-7330-4880-af97-5e32b44658f7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.52.199']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.985616Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fefb90-58cc-4f57-9e58-324298999623", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.78.245.193']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.986714Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72775b11-5159-4237-8d79-684cc764f17b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='152.32.211.250']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.987718Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfa0bca-15f6-47c8-83ca-4f43ecd46dda", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='154.221.16.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.98878Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98115971-82fa-4c95-bc1e-de14c88a82ad", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='154.221.26.237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.989844Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d399c1-d041-4c68-a75b-06bac4806d0f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.91.105']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.990917Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b169d1a8-6b58-47ed-b0f1-1cd2013c253b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.129.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.991983Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9416ca9-53c8-498f-b629-429441418427", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.136.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.993209Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa03bee6-32e3-44b9-be64-4eab75f28470", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.151.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.994432Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df89dad2-ccf7-4afe-bb09-516315bca780", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.171.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.995521Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cb742b-fa8c-46b6-bc99-dba35980b040", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.89.85.209']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.996567Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854f0396-33db-4b57-85f1-7a9129bd0abf", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.89.198.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.99768Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ddb2c3-f9ec-47d1-bf59-fcd34a033f34", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.69.158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.998687Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc9a177-cebb-4aca-bd39-fa095acdb5c0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.86.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:42:59.9997Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e201f898-a888-4ebd-87a2-ceebb2232147", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.35.26.171']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.000804Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee1107e-2acd-4c46-9663-80c0427e40d8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.241.114.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.001882Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62199dd-9bc7-4707-817c-d0fafbf615c4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='164.92.87.79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.002978Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5539f0e-077e-48ef-b41f-1410b8830ee8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='164.92.210.129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.004185Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d8039b-9886-48ad-8f31-ac0ce9e9fcf5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='164.163.98.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.005473Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a031836-3245-4c67-a007-c57c16efc7ee", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.172.58.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.006592Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d40eb5-2d4c-41dd-b65c-41cc28c31018", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.210.155.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.007667Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c7d5ea-9a4b-4a40-a5ce-ca14d18c52a1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='172.247.104.122']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.008891Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee5ff38-48c8-41fa-9d15-819743c1fc8b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.196.129.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.009994Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bbc47b-7f76-4fff-a22d-365e11bd1fde", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.203.66.34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.011065Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20200200-232e-443d-8ea4-a3dbe4a04471", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.111.173.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.012115Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05c2dc3-45f8-440e-8b41-b724bd0624d1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.118.30.252']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.013383Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cd8c73-c9ef-4b70-9386-12f57af4e226", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.220.131.211']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.01465Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fb02e2-9cb9-4e08-91c3-106d4b77feb6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.62.205.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.015953Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211aea90-b2c2-4ba7-992c-8e39ba79051f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.141.80.181']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.017287Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a17587-b466-48cd-ba3d-33f24664735d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.154.225.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.018919Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c18037-6225-42c3-a0af-a7d1c18c3223", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.198.61.21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.020108Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ecd296-ec1c-47b6-9ef3-cf894faf1471", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.50.16.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.021247Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e2fa08-1329-4304-8557-457c2a96fd90", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.99.202.158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.022267Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b059f22a-8e9d-494f-bad8-935eebd641cd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.176.99.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.023286Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf76aa3-070f-4ec7-a1ab-31abc6f2c756", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.193.221.202']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.024358Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e20478-861b-4ce9-8d4f-356876a807c1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.218.165.139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.025768Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781ba2b1-e4f6-49cb-a25e-484f83f29b64", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.117.202.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.026923Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9873eabd-c6ce-4ccd-938d-0d1791f9e0ea", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.188.195.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.028272Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdaf1fa9-a6cc-4916-b9ec-3edbdad773b2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='182.23.111.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.029738Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467cf758-2bbe-456d-9139-85944269b0fa", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.82.34.122']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.031207Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b28248-81b9-4cbc-9e0d-7f7cd7549cba", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.109.168.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.032465Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1cff19-dde7-4a55-8566-f3c846ca4522", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.227.152.209']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.033809Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d77c92-c98b-4290-bf9a-ab76591e5da6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.250.172.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.034992Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8339960-b03a-412e-b569-80ced38fc287", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.254.0.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.036209Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff38a6ba-3262-4a5e-b6f7-f6999c07471c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.190.236.12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.037668Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4678c77-1bee-41ca-8b78-1786ab9d298f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.93.159.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.038859Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9c0e2d-50a7-48a7-954a-d29ae4a25639", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.145.192.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.040111Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a9440d-f424-4541-a1f5-feb278a1a440", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='191.8.148.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.04127Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09af57b2-9f31-4542-af64-4cd974d47a47", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='193.32.180.252']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.042307Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a066ccc-28e4-4057-9595-5425be782e0c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='193.124.204.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.043348Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd3c071-f103-42d3-8dca-494d13981c63", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.110.203.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.044669Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a29b87a-4a0f-4160-af01-b3438e8d00d1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.209.191.243']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.045818Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fb572b-532b-4479-8f8c-bd5cde3fbfe9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.55.56.122']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.047197Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56e852a-a5ba-4466-8d66-e72851b01c6e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.73.131.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.048394Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab989da-12d7-49b8-ba37-df08d04e690b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='202.62.122.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.04973Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d38ad0-4b14-4a7f-8775-dec0842d3c62", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='202.175.174.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.050931Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56764a46-b1db-4613-ab12-e1b4632a4b47", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='203.190.55.194']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.052337Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528262f2-f4fa-41c0-9ebd-848741876728", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='203.228.126.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.053613Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab5daed-b63d-4a4a-83d1-0a96aab39f2d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='206.189.80.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.054846Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba274510-bbe9-4e8a-9c48-352bb5520da6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='206.189.130.255']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.056051Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee64416-09af-4bd9-a7c4-13f4b2905321", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='206.189.137.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.057486Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e038512e-6f7a-436f-a1c2-4d53ff440fbc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='210.4.75.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.058703Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a31a26-4fd9-44b5-878e-fae22f9cc5ea", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.75.151.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.059747Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5931e58b-c557-489e-a294-e3949c25780f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.221.23.247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.060834Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e83528b-dbf8-46b2-9a8f-eda964d4228d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.55.211.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.061901Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2adbdf-b885-4ad3-9dc8-4c6d0905afc7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.150.232.89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.062952Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48acb14b-d979-42e3-84cb-636e1915602c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.161.31.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.063988Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a15a8a-98bc-4879-bb60-4cd5966b7303", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.211.171.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.065128Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a01ee95-57e9-4426-8cc9-29d2754fa3a5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.127.197.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.066238Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bbe0cb-9c32-496d-828d-3dfbc733511d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.132.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.067355Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a987f35-e0b7-4433-9c58-5b71bf6f3c9d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.139.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.068401Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf4a80a-48ea-4619-b6aa-612e0199d818", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.133.194.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.070203Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccf29db-be27-4e28-862a-fd5043f6e39c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.104.122']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.07127Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71033e1-67a0-471e-82d5-7fb52f7d9893", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.158.180.251']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.072361Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894315e1-9a30-48b9-ac6f-fefa65afef0b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.148.10.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.073484Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2a61b8-f648-4441-81ec-d5cfe29c0e88", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.170.241.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.074551Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a26c96-aea8-48ac-b5f8-8dc644044eab", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.42.19.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.075622Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b644f9f-34ab-49b5-b44d-2ee2f95a55c7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.076758Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8380520d-7840-415e-b8ab-e19bde7b222b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.203.255.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.077974Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86287663-2f13-4ff0-b600-b0ff4b055946", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='154.89.5.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.079093Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432510ff-323e-45e1-97b2-7953d799ee4d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='184.105.247.244']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.080148Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3d0424-e2d2-42b6-8e83-e9c395aacdb7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.94.111.1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.081508Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8f1609-3978-4ece-93d5-6934b4e28322", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.199.116.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.082659Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d0bbb1-f013-4aa4-b5f6-7da68c842789", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.235.24.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.083826Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57551a6c-ba07-412c-b313-11276267d56f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.235.24.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.084966Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cde61d-be8b-4228-a1c4-c2c9e99d71a0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='1.176.186.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.086021Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3558ba-e694-414a-aaf2-fab3751c2b7d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='3.111.40.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.087082Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea887f48-7933-4e03-8280-5a2a643aa0a2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.167.67.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.088153Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca67fd3-ca6a-4a00-a728-ef121d57429a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='23.225.191.123']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.089337Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46360795-6a09-4054-ac36-30afd6d9019d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='24.73.236.54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.090477Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758199df-7927-4d3e-bf9d-3fbaa2b5f325", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='42.200.11.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.091584Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd012223-badb-41ea-a181-44d28f47d1cc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.138.17.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.09277Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17741a2c-d1db-4df9-bb43-2de46c34f0ad", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.143.35.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.094062Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7919a02a-aebc-46f5-b7b3-10fd11613113", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.155.169.243']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.095103Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518a6d0b-988c-4cb0-a218-dcc2b9199752", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.156.31.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.09615Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79db05e-f7d2-4d15-a4e1-4ef0d757942a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.119.212.147']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.097287Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24877ec5-e98e-420a-b05d-b3ac28c71cbf", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.101.2.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.098323Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1c8d7f-dafe-4b16-8262-511db9ef4d1b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.101.123.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.099385Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b07666-013d-4e96-b721-6e7ae7f8846e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.205.211.100']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.100506Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7865153e-09f1-4191-b2e1-7103727b7bef", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='47.49.38.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.10163Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3deaf8af-58e1-4398-9b04-8b23c14bcfcb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.247.24.207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.102786Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9d8fc7-9b66-4af6-bedb-fd63adbb74bd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='50.196.204.233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.103806Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bba0b72-1b2a-40a3-9c53-492e547e18b2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='50.213.110.149']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.105137Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c3147f-755c-4e6d-92d0-827920f4889c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.91.157.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.106181Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73b650f-810a-41ac-b492-eb82318465f6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='52.136.116.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.107229Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93344a8c-1358-4a45-b7a9-71da4ce2046b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.13.166.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.108267Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1669ad4f-e98d-4cc0-990c-cdfc46abb103", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.23.64.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.109389Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0aac638-29f1-4b3f-8efc-7b3471c00b18", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.24.6.146']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.110443Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54eda483-19d2-464c-aff8-fbfd6a0c4e17", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.104.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.111513Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964a2519-41e9-4093-9bef-c636cf59a986", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.127.5.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.112766Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec51066-f7ef-4385-8249-50947c084647", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='60.9.236.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.113959Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70caf6db-caec-40dc-8369-40220d963a9e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='60.52.165.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.115261Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2249e70b-04d5-4adc-a330-90adb000f1be", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.61.78.54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.116321Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ac5dc1-f5a2-4d71-a22c-efc0e05232a6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.76.29.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.117609Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8b5579-c41a-44bb-b4b6-a9269b09d21c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.76.169.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.118786Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc762f5b-ad2c-4053-acec-04baa4297d1c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.80.237.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.120064Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55011da6-98d9-43be-8d6b-0cd366b9d9f6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.121179Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f2df6e-d082-4b63-913b-924354c0c26b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.122353Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2a6ab2-561e-46b4-938d-f14a91e54d47", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.123374Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89db4de5-f6f8-4bb9-a50f-d4d8565d6bb5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.124387Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7320f6ea-2145-44e5-8023-fd52bdf06afe", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.125502Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d999b292-2ab8-4f46-9327-4532c405cd68", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.126615Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3df479-2628-4d27-9692-0b7c09879d74", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.127656Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bd0b14-c493-4ac6-b3ff-62f23f0d4815", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.12904Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0e9b7a-1f80-45f7-9310-88c2d793810c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.13009Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3030ed96-3b81-464f-8b9f-3290f40e1a56", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.131287Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c1fb08-bddb-44f4-9223-a7b294ed0b25", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.132426Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78955f8-9ade-4850-ba36-c00c71810b78", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.133553Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b768a3-a98f-4cd2-8ab9-c832386a55bc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.134826Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800300ae-55ca-4ac5-8dc0-74b52d5adc30", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.135858Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6594124f-0ee6-4b14-8e4b-c1ec1114d3d6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.13699Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c45202a-8347-4829-ba72-7d41079fb955", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.138041Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f5b430-5dda-4659-997a-09ba8a32623f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.139117Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3455846-be03-4ca3-a20b-e9891f564cd1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.140172Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6499d1b3-f932-4a89-9c6c-cf1c3b207844", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.141682Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d0635e-d286-4d85-820a-5d73d9f756b0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.216.46.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.142881Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f61ee43-9cb1-4980-864e-8ca07b88e50d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='64.227.32.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.143971Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2d9920-ad6a-4b80-b89a-e1db8ba95c59", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='65.181.91.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.14513Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580381fe-782a-4447-8553-30adfa7ddd5d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='69.1.42.159']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.146198Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e44e4cf-081e-4e65-b8d5-073e3731be75", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='71.11.20.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.147249Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca234ab-6379-4c4d-9a61-f7b10b87be90", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='71.67.66.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.148337Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06826262-22d4-4ff4-9eb8-5e5e791a05ba", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='78.31.155.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.149454Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79357884-d899-49ed-a9f0-b141613611bf", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.153.9.237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.15049Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef64981f-dea6-4bef-8595-579abc44641f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.153.228.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.151587Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3c0607-d8b0-4da0-bdd2-2b6117b4826e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.85.241.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.152935Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014d44a7-0738-47fa-95db-5f587c5a973b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='81.230.214.72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.154029Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce799e87-3489-44ec-8878-076fc116dad0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.200.168.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.155085Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1357e421-360a-447a-8703-b0ad451b9b9c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='86.105.27.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.156164Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbd6c70-18f7-4e0c-8806-03cb3d937e39", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.68.41.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.157305Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0957edea-0c38-402e-8fc0-d543d1fe3cd1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='94.112.236.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.158313Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe4d439-7dba-48e3-9ee3-6d7dd3f68855", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='95.160.144.251']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.159344Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b405d53-5161-4afb-aee7-0899f6480e16", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='98.142.141.184']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.160449Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e875c3f-947f-425f-863d-71717f27560a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='98.248.92.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.161568Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa9b797-4b2a-41b1-b00e-4811112cb15c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.115.24.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.162652Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3954ce8-643f-4cab-83e0-783653e25c80", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.138.71.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.163744Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ef08a1-5489-4a8b-9e4a-f605a24e6329", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.179.56.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.165055Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781d11c1-6f72-4d7d-8219-8fe0012c7cd6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.200.24.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.166101Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e14fce9-5334-4bb8-a7bd-6c8047e4c590", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.232.121.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.16717Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9eecb0-a1b0-4b63-9e34-c618a51c8232", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.131.181.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.168392Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d4ed2a-8bcb-42c7-a6f1-9d07ed4dbd3a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.204.9.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.169557Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b64d35-5ea1-4167-a6b7-4db895e3ce31", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='109.195.194.123']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.170622Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c53966-b65b-4185-986f-1bb0e1bfbd41", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='110.3.254.213']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.171735Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e33705-917d-44af-b538-9028ec414d3e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.162.177.131']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.172893Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6de375-9a62-4ba7-8ca2-f71be6e52a8d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.217.164.107']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.174009Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c730fe-fed4-43f1-af33-fd1c41c2a60b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.107.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.175155Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86d6b76-80bd-4c9e-a287-d72886ec735c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.235.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.176461Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa16e54-1682-43c2-8924-f4349dec0460", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.34.192.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.177655Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58918cd4-834d-4c50-ba62-fdb20bd8a657", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.35.40.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.178678Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb44242-5ffb-4178-8f8a-2bdb0b965be6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='115.249.50.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.179712Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761a4a38-3f32-4727-a613-39856b53b35d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='117.251.105.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.180792Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee81ac7-94c8-4363-aeb0-ac778eff891d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.36.54.250']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.181895Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb267c3-359d-4daf-9055-179611746cb9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.41.108.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.182969Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579f5265-8b4a-4467-9f64-829dc7a8788f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.131.154.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.183993Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c071028-f016-4acf-bd39-8517abd506c6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.129.119.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.185164Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1718b781-a339-49c6-b49e-835f1143eabb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.164.209.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.186234Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d0cdb5-b621-4bba-b675-490d9ae3355e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.116.125.151']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.18739Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07843523-7700-49c7-9d40-c3ddb02cf678", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.118.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.188698Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de387d7f-6f41-4c4e-8eff-1820abc4f3f2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.235.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.189859Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92f936a-6284-41fc-8a7a-7d6818449265", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='123.204.25.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.191117Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f1c1b8-3404-416d-acfc-da1112e94829", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='123.205.245.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.192462Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82535fd-d04e-4f3b-ac2e-3c6be1e8ca07", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.138.44.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.193781Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2974f27-0fa6-4dab-9a05-428b5c59ba23", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.227.58.62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.195025Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1c8dcf-2b50-41aa-a2dc-bf99ae2dc5c1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.229.55.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.196199Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40706188-3017-4207-a773-d941d3da3d32", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.126.119.71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.197518Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd773ef-dd23-44a9-9cc7-e448fc9ce520", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.209.249.40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.198808Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b6bb08-9630-442e-a823-3a5812f13016", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.184.139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.200031Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4570606e-3400-4a0d-806b-89f0cddacbad", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.105.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.201575Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0f19f7-9ed8-4b46-ba98-4ab4c1d9d02c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.231.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.202788Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af599b35-2377-4580-8f6b-2e85a316d91d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='141.94.17.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.204074Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5469040f-7e7e-40a5-bc59-518dec906f3e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.110.209.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.20548Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c9177c-42c9-4e80-acd6-3d0f9f71a6a9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.198.146.239']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.206496Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30cefbf-966a-4b6f-9cd0-3c2e5ec90c7a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='144.22.227.71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.207521Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2105cfc-79aa-4061-941c-5a06d3cde91d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.182.181.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.208654Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133ae718-24fd-494b-b55e-40f1c4eabf41", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.182.201.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.209724Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16afb587-81bb-4e38-a7e5-68d2d9d72ee9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.182.229.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.210792Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a075a400-1b44-42ba-abd4-360b581f651d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='148.72.209.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.211946Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e05169-09b5-492f-a01f-20aa743a9397", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='150.136.161.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.213432Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7000f132-5b6a-4a40-9fea-ab56e5ffa5d2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='152.32.150.45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.215411Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8537d7bd-c435-4067-acdd-9b2028febb1e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='152.228.174.113']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.216844Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3594654d-b9b8-4585-b027-16ca7738ee8f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='153.151.133.196']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.218134Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7f6fc0-9625-49ff-9014-bb956c3347b0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='154.83.15.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.219287Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2e57cf-9aeb-4871-86a7-3f4c6723ae9f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.230.98.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.220494Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d20f476-7cce-4b47-b178-ad68b83b7d8a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='158.69.80.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.221733Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b855d6-adc0-4f80-93d8-4b61abd24f5c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='158.69.111.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.222958Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2963103e-1824-45da-a2b6-9c810fffddc8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.12.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.224223Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f6023b-070e-42e8-9452-8033a0082758", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.194.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.225468Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ba2978-ceff-4cbe-b92b-1128c112310c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.205.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.226634Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646e8cbb-7f39-4c6a-892c-eea793ab845f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.203.84.97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.228337Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b078a5e-f163-4dcb-b396-8b52535d8022", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.168.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.229438Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60247d5-ac8c-4e59-bb75-271e353bf7d8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='160.2.199.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.230478Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c157fa2-84e4-4424-bfbe-ccf71be233d3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.35.90.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.231537Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c900a0-a3eb-43d2-abdd-026aff78990b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.82.175.24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.23266Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da95bd9-ca41-4640-80a7-97e186d8caca", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.82.253.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.233862Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2279676e-c110-4c5b-9c82-700de1700f44", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.226.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.235064Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf80c72-9327-4d94-9c39-cd88a577d78a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.244.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.236154Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944bba89-d23d-4a78-b1a5-ab4ac0b7c1fe", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.99.65.193']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.237266Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce277ddf-8859-45f2-b3bd-aed1936c9bf6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.64.136.252']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.238313Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d9cb2a-8afe-4a26-9e9c-d3a0b8ae4249", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='173.82.206.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.239358Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4902b255-19a6-497d-a402-78e082ec162d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.204.208.197']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.240616Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280abc1f-cc47-4ca2-96a0-ce29e4e7c83b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.45.74.117']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.241706Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e86086-6f06-4886-a43f-8962a12c0222", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.111.173.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.242967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4caa4b-2bf0-4e2e-90f8-007983b661e2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.46.163.191']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.244215Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57341a6f-c695-40a7-a5c5-910799dec584", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.62.100.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.245489Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fd2129-b7d5-4a76-bb7a-6b02fef2a3b6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.211.20.219']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.246884Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f99d2a-a5a0-4df0-a1f7-49df28f5d1ac", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.190.241.88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.248121Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65e1e80-4f52-4d9e-80ff-183a02088383", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.48.60.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.249366Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b5062d-a181-4078-b542-ad56fe8448d9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.63.248.149']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.250602Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcbc155-0ad2-4bde-a0ba-915ddb98e0b0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='182.93.7.194']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.251678Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b14fd9-b68f-47c5-80eb-41443eff0292", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.100.98.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.253196Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e596f6d-37cc-46ed-b809-7664ae65d751", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.133.225.62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.2544Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cdf8cc-71da-4dbc-b985-5c83f5fe6581", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.68.31.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.255565Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32f3b07-0b91-4dbb-8a0c-78d3d1993272", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.152.184.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.257145Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b713fd-9d71-4334-ab3e-9ca8fffec12f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.56.100.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.258194Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924f57ad-0b93-48c3-86ff-02f6d7fac752", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.129.60.125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.259258Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73283c8-0c73-4204-b353-d7084bc7deee", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.156.231.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.260365Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab64208-5ff7-4ff2-b03c-ba9c84bc2cba", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='191.32.77.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.261499Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ea4c1b-5c23-4381-8fd2-8c4f2c5ea1c1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.110.203.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.26262Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8a919a-de57-4db9-847f-4ace678f6813", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.9.32.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.263707Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f300c60-992f-4cd3-81dc-d2c0294b6c06", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.222.163.54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.2651Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81834659-143b-4bee-9f56-12d1b828e335", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='197.254.47.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.266406Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c4c690-b248-44c0-9887-7d5293e1c637", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.211.40.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.267424Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3aeefd-a201-48fa-9450-d3ba955e9e58", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.244.202.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.268476Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553bdaf2-78f4-4088-ab0e-b9d243b20910", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.73.138.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.269561Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f7b9dc-73a5-4f44-83bb-0fdb644113e9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='202.165.17.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.270576Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0007911-bbca-4f35-846a-8a6f5b45be6b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='202.165.246.238']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.272013Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c417581-1eae-468f-b450-a79df6249571", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='203.76.241.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.273252Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b660ded-2e81-4fb5-b290-2c07a0b01811", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='203.109.46.149']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.274399Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024db26d-f4f6-4b38-a2b5-c32627833e60", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='204.48.17.233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.275468Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038fe55a-c74e-4ce3-aefc-29b1b77edcf5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.185.121.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.276629Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b1a822-852d-464b-859d-730f9e60371d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='206.189.49.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.277947Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e89b23-9b5b-4a48-bc15-3a4e9b839428", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='210.14.6.60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.279022Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5a4764-c617-41d5-9a3e-debf375f2da9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='210.202.62.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.280088Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f4f77c-c58f-46fd-8267-a20b9e4a3077", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.20.14.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.281225Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884d4ca4-487a-4789-abdd-0fbf61a8c0f2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='216.15.70.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.282266Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abd5bc6-2720-405b-acdf-442663cc45de", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.150.194.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.283309Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3294b415-40e7-4b5d-92aa-9be3faa8d689", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.151.48.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.284397Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d3b734-49fc-4f75-b0a4-2674511febde", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.161.66.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.285636Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec095ee-fb65-4b49-87e1-aca843b80e58", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='219.86.2.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.286738Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0490163-13d2-434c-bd35-3ac70cfe72b4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.80.143.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.28784Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad11294-5cf6-4051-9910-1a29d2b70cb1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.125.202.69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.289037Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb8be49-54cd-4601-a2f6-6b3e4494939c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.127.197.120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.29032Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186e250d-7b9d-413f-a7d3-56af4413462a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.203.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.291379Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0898a7ea-8213-43e7-bc9d-464230425019", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.206.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.292497Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38bbf31b-9092-4cd6-a8b0-4f767efa7368", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.135.78.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.293769Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7845ec5-bf99-4893-901c-6f998de13395", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.247.10.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.294837Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de050ac-9bf0-485a-940a-7799e49ce8d7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.103.54.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.296041Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b045d9-8e45-4bfa-b597-bb536b1c584e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.109.92.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.297222Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5281a1ff-7714-492e-ae36-388560ac5730", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.110.197.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.298261Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28237f3-f956-4566-b9d0-6219322cd4f9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.197.183.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.299328Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6994022-be76-48c8-8b2e-e5c0e58bba87", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.148.10.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.300424Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8a33ae-946b-44dc-bd9a-454fdcde8d3e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.28.218.34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.301814Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7efa9d2-7f2b-4e53-aec3-0fd3bb36423b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.42.19.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.303045Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6bb140-de3f-45ae-99a0-37d54dc19747", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.304064Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4978725f-aa0e-4229-aa7c-4d0523321de6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.203.255.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.305167Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27516af1-8c4d-4855-a168-614f9644f0f8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='154.89.5.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.306289Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b99ff38-005b-440d-af6d-5bdc67238bc4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.243.149.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.30729Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241aa6b2-b366-4864-bd5b-c5afca3a744a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='184.105.247.244']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.308326Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beef5579-7548-465c-89bb-236415f6be4c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.94.111.1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.309424Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541b578e-5de2-43b5-8d74-d72bdc5893f1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.199.118.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.310469Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521c89be-58a7-4a07-9630-95f137274390", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.210.31.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.311538Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c034b7cf-bbdd-4bc1-a7b0-319c1669bb1d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='1.176.186.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.312755Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6c6730-fe83-4013-a9d7-b7dbdd6fa89c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='1.179.157.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.314095Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d177f3f9-b111-49af-a605-8530a0af5067", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='2.42.206.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.315238Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d9f569-89c3-4274-b96d-9b308663a9e1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='8.213.18.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.31642Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccc5705-658c-4061-886f-dcf07b1301ed", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.97.93.69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.317517Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e514e118-a222-45f4-8959-0bb3856da740", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.225.255.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.318545Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c904ef70-1e9b-47e6-924b-b6d1deb12c02", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='15.235.146.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.319583Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6769ac71-14cd-4032-8648-2fdcd6d4230c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.87.216.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.320656Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16775116-fd3c-43b7-acec-e6f44ce787bc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='23.105.194.93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.321721Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a678ff-3448-4dd5-94bb-fccf59b58fd2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='34.69.148.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.322789Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65af911-4771-4f6e-88ae-bf178052d3d3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='34.148.17.205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.323997Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8779fd-da34-41ee-90a7-6e7c6fb55f85", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.157.220.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.3254Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa5eb18-6345-4e4a-b619-f60b3c457b32", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.187.45.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.32645Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bc54e4-44b8-4e22-b668-fd1a92a0efeb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='40.76.197.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.327472Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1159dd43-c626-4808-864d-5baebf9c8fe2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='41.73.252.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.328491Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062bc5da-10b9-4d7d-b4be-b350e372b442", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='42.189.168.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.329546Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d773fb-37b7-4063-9a7d-c71828afec3b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.135.132.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.330539Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305339e4-4130-458f-9524-67f42c75acca", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.135.153.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.331582Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1985c1-42be-47ef-8b27-b60947782586", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.135.160.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.332634Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ec8955-ebf7-4907-b810-658a4d9383ee", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.58.120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.333892Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d993d2-65e5-4e55-a1db-18a086fe7e60", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.184.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.33494Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55db981e-fb04-421c-9c87-9efc1f1b7ee0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.210.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.33609Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e99e9b3-fba7-4e0f-a603-74cf7a898602", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.155.173.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.337382Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a872ea-a8e3-4001-aec1-45819f18c428", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.159.40.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.338424Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bf4a2b-e5f8-4aac-821c-b2882d5b7d5d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.159.52.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.339487Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c924904-94c7-419a-b029-a1419a0fd636", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.242.101.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.340551Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b194e5-48a1-45da-aac8-c226981f5eb2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.243.215.243']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.341638Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031a6b1d-54c8-4d88-9439-8739b0fecc3e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.118.145.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.342873Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e9766c-e9c0-4ba4-9ad3-c4039ebd0f55", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.150.226.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.344085Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5e96d3-e113-4162-9215-428b223f84e9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.195.14.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.345259Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b215a1a6-4008-4f45-bb51-1853f30c65d0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.236.244.130']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.346474Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5f0a93-ba95-4a22-a288-abe92ce4b3e4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.101.5.100']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.3476Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b99a5e-f5c7-445e-b39b-15410a2e67c6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.50.229.63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.348948Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde0765a-fb57-4b75-a6df-f3e1ee08c0fe", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.213.217.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.350002Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06248040-8f71-4213-b89b-078cb39187f0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.247.213.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.351059Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ae7b72-82d8-4c72-928b-5a7e1b9216ce", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='50.254.136.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.352108Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055a7d19-ac22-45dd-9e6a-20a9d7dc0661", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.68.136.72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.35329Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa823cce-2623-4314-8cc7-f1b13241ad1e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.210.241.185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.35437Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ef58ea-1edd-4622-bfcf-8a4724a3b2c1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.250.81.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.355416Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f80239-753f-457a-b7b5-bd2c1e4a82a2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='52.172.168.56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.356447Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6228a6-78e4-42ad-b0db-32cac58ea10d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.124.170.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.357541Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a91daa-532c-4563-99b8-3ba13fe62b38", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.46.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.358661Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b15a02e-4667-4cf1-83da-4d4c2cadd1e1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.241.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.359762Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0adb6f-a043-49ed-be5b-c8057b382dd0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.251.219']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.361523Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08b61cb-12e4-4a81-9ea9-aaef379ffb87", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='60.189.108.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.362615Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee812c2-3006-4227-abb2-a54ffcb5b86a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.40.213.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.363659Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119fa0ec-bb17-4019-b923-5561f050f053", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.72.55.130']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.364746Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c882990-e590-48f0-ab1c-549c61c8dfb9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.365931Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e692d12e-ad39-4587-bb22-ab73a6768056", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.367043Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b65153-52bb-43ea-81a7-b3f3f1d88517", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.368118Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705ad89b-ae56-4432-bc66-bac5599d91c8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.36925Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0990fe-3c96-45f2-81e8-2cd46f470c54", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.370312Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f725125-7a60-444e-ae38-136ce397c196", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.371353Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab467885-efee-44cc-a54b-8d5bf65dd7f5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.372624Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783caf24-0455-4ca2-b177-ca23e53a3d95", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.373785Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563ceabe-a4bc-4d9f-b1e2-43d0d8c784b6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.374863Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff85ab40-1928-4f3c-b149-f50b2977150b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.376001Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d0ad50-14ee-4b25-a18a-0def36fbbd8c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.377162Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61372ebd-4124-413c-bf6b-b651caab7d3d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.216.131.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.378292Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4524e1d-e606-4cf6-95f8-0c2330e0268d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.233.50.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.379346Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4abae6d-063c-4ac4-ae1a-e02ede32cb15", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='64.225.48.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.380403Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8c59b8-cd8b-478e-b054-0709f1af922a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='65.28.110.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.381578Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579d6114-e04e-404e-a1c0-17fb3e063d9e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='65.109.209.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.382667Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d9fec5-d7a3-4781-bf18-e90a893497a9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='67.246.13.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.383799Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c613ea7c-912e-41ad-a9c0-c1493210234b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='68.183.27.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.385142Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c380c6-e4e6-4fec-8859-d8add3a7f51a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='68.183.170.149']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.386234Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b4cc50-8350-4be1-8bfc-18d3b3883730", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='68.183.191.56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.387284Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3b414c-a6e0-45f0-bb78-73279a44f2ab", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='71.26.54.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.388324Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1378be14-4afb-4fdd-b1f6-7f24e2dbff3b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.240.125.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.3895Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b785b87-0e8d-44ef-9e15-cf5e57b873e3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='73.159.26.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.390568Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f9a7ba-5516-484f-a218-cd33f4234591", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='78.135.67.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.391764Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9515922c-702a-4308-904a-6cad3cf5b90d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.15.141.139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.392929Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054d25f2-d3f8-40c4-8354-de0dfb0c9be9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.58.156.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.394069Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c03c80-252f-4bf0-a984-c509aaebdfc5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.68.7.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.395153Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b771bc-56d3-4a1b-af6e-8dbdd54e76ae", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.64.105.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.396386Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab1f052-6f30-4111-9265-69acce488b1a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.65.23.62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.397508Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68e0b20-30d3-4754-9277-86aecefa0e6b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.65.138.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.398571Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4699b199-08d9-4a3e-8778-6add4e207073", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='83.0.114.127']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.399643Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c42c7e-4c2a-43df-8011-97ceb42c8036", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='84.53.195.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.400755Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302f840d-6b07-4b76-847a-9ecb83540f0a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='84.54.74.130']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.401842Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdca2a78-135b-4d7a-8296-20595543651c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='84.201.172.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.402896Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d86351-d32b-4c7d-b09e-a5839955783e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='85.233.150.79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.403958Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adf9b95-a2a5-4cf2-800f-075554de8811", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='90.154.125.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.405154Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52522550-383e-4213-acfa-20603f122b03", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.89.94.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.406226Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951750b4-78a6-4edf-a1cb-acafa7740bfc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.144.158.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.407315Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a904868-9f63-4a76-b114-89aa183131e6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.50.144.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.408598Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7232cb20-7ffe-406a-824c-4b5accb178c3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.60.180.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.409772Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ed247a-d66e-46c2-951a-4648284b058c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='94.189.198.129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.410853Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022e1008-3d5b-4921-ac2b-688544d6f584", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='96.83.24.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.411916Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ad9407-9c7d-4be1-a8ec-2cb22b9c735e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='98.243.143.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.413057Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24238bc4-0686-4508-80bd-938fa5f698ea", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='101.36.111.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.414196Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e461b30b-5425-4177-a8f1-ab40d5268956", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='102.218.10.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.415274Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e990d407-b258-43bb-a4a8-7fe84a20d11d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='102.244.212.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.416388Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ddd64dc-059b-4826-8a6a-ebe5e9eadcdc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.84.236.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.417615Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b81c07-590a-45d6-a90d-f7b2a0fb83a4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.93.237.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.418682Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c507b637-60f3-44d0-b9e5-71a439b10da7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.135.88.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.419966Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9689cff-ce65-4724-b181-e3024bb1d3f7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.162.20.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.421106Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b6dae6-3dc1-478b-a488-01a556adcf99", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.199.210.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.422171Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0defa70-7b98-4b23-8c80-7ceafdc7cf2c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.212.211.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.423221Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900bd1bd-f699-46aa-b4da-328870eabbf2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.242.199.205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.424311Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1171634b-2b2b-4391-bd33-7e319cea248c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.183.206.189']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.425473Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d516b6c7-3b1b-4afa-b9f6-e6f3cde5b888", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.248.138.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.426552Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7425eb0f-f353-4def-8f7d-312aa084024f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.248.163.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.427625Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738f1e4f-6729-4b12-b3ec-e1c45fd7bfaa", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.1.109.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.428712Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c9accc-50c5-4ca0-bd25-2170d359e6c9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.105.165.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.429828Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f9f2ee-cf46-4dbb-a231-55c83e73755b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.246.224.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.430911Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3221201-8cae-4ed0-8511-03891f623c51", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.173.149.40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.432167Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae0cab7-7bf5-4e50-ad77-341b3efae039", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='111.255.47.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.433358Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9904a407-0387-4da8-8de5-8e7cd4b52c86", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.161.214.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.434393Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70f9e75-a719-42e6-9ff3-b8eed963036e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.186.86.93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.435738Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958d6e10-82a4-4d27-8743-9afc2cf361ec", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.187.93.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.43683Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840879e5-a269-46bb-a40c-ef0f90768eb3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.215.60.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.437982Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe6ab40-1432-46d3-ac9d-bbf50833aaa9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='113.182.8.195']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.439061Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfddc86-96f8-4b6c-8f88-85cf34c2803e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.32.65.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.440174Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab083dd2-1445-4251-89d6-0720588c123e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.32.165.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.441284Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080969d4-9f58-4280-bce3-17923198426d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.61.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.442416Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c624ae78-ad7e-4bbb-9947-0d8ee0d9eeb7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.126.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.443773Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8474e193-2375-447e-90a9-d3cf3a5ec33f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.163.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.444907Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0d016c-d4ef-46a0-a4d9-fb6aa221d518", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.34.252.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.446001Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9831908-8ac8-4f98-b546-c7fc4a45ff17", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.199.241.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.447063Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a892a5cc-b37f-4e0f-af8e-5c0efce7da0b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='116.59.25.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.44814Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53991c9-8478-41ed-9628-726e75fdface", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.150.61.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.449276Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1e5dcf-1daa-414e-bdfd-a363c9f30866", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='119.152.245.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.450338Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15412f69-b35b-492b-af53-5d340107d596", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.158.230.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.451403Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95083a12-1581-4e86-b68a-3bd828031c26", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.118.171']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.452501Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0dac07e-7a50-434e-8a38-25ff2250cc73", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='123.58.216.78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.45365Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fff994-a65d-4640-8b36-c273e286cf0a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.135.95.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.454739Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a594bc95-0c49-4224-b960-8b28fb3857f0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.228.33.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.45618Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e80d81d-3f43-4c7a-9027-c62c9e50f61d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.229.18.79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.45736Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a4916c-643c-4c5c-8430-f97c29070989", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.126.102.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.45855Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4371ae34-f766-4235-924c-06577f01a4c3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.146.241.147']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.459577Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc67048d-08f6-48f7-9386-53c3ea38e8cf", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.150.37.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.460642Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d161eb-9a7e-4468-99c2-b5f94c0b7e88", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='132.145.139.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.461701Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18556885-7e38-4be6-9a14-f8f08fce4858", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='133.218.162.132']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.462853Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93ce98d-8868-4701-8b93-42d7192c1f86", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.209.104.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.463958Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d84938-e82c-47a2-a526-fb34b68aa0bb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.209.159.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.465092Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18fe084-771c-4cd1-b648-c14559e19020", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.209.190.88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.466265Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d851d836-d881-4163-85c6-70a185b965f3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='136.228.161.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.467653Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a4fa09-ba4d-44f7-aedc-27aca93440cd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.112.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.468761Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e776b52d-c47d-42d0-9828-1779cf17970a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.127.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.469846Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394e9fe6-8e1b-4982-8cec-cf28acab7e3d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.230.111']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.470968Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e887084-9606-4765-9063-4da46fce9070", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='142.44.247.187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.472114Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e29208a-25e3-43d6-b1de-de6d4a530e07", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='142.93.161.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.473303Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5714066a-b038-4b65-9977-d66c7fed17bd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.110.188.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.47442Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf41184-adbb-4727-b01a-3313de71871f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.110.190.247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.475528Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d9e9fc-1882-46a2-96aa-80081e7f3980", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.198.39.194']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.476596Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d76112-621e-4753-920a-1b2b2d6b2afd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.198.179.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.47768Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91be6fb-0145-4527-a0eb-4d5cba633172", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.244.189.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.478719Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd54d06-02dd-487a-a205-9ac47e776428", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.135.219.202']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.480035Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bb7978-d2f4-465a-95a5-3b78b89aa46f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='149.89.161.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.481193Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94d2edd-73e6-4eae-89d7-793a5755dabe", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='149.102.148.254']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.482232Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efeeeccf-b291-49a2-a7ac-8223265fc75b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='151.54.155.89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.483283Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabe1756-feaa-465c-a306-8c73149ddd18", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='152.32.234.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.484326Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2f5f89-86e6-405b-a34d-50efc31a05c3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='154.221.17.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.485447Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e115a3ee-a238-4dc2-b4c8-b99d7f3ccb00", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.7.67.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.486474Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa8607a-51ab-44c0-8584-0847a84489b7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.230.113.181']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.487538Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bbb080-0b32-4f53-ac1a-166f92a4df49", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='158.69.111.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.488634Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea02f8e-3cf7-456f-bdc5-6eda7ae2118e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.133.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.489721Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f9b07a-bafa-476d-b022-c1676bc19733", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.89.115.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.490953Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc77bea-f825-4cde-b61a-88c86fe22c5d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.89.162.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.491967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22c857e-89f8-4c40-aa9c-975ac525117d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.69.158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.493074Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a357bd53-89ed-4dac-848b-b93234bdf352", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.168.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.494137Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75550b41-25da-4405-a117-e852523ddbfe", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.208.228']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.495685Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644bcb74-1ca3-430f-b7d9-f01278c9c29d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.35.70.161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.496826Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed6611b-8c44-480d-a015-1bd80951931a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.35.174.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.497868Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49e111b-0e1d-4971-a0da-f114ebef88c8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='163.172.166.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.498928Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9a72cd-10fc-48a2-a0d3-70c62f194732", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='164.163.98.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.499972Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b879c6-5942-4527-aeef-c2748fea7d0e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.22.59.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.501106Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe57e1d-e946-4c36-b85b-f8c30ed5f46e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.22.101.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.502182Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2300ae-4529-4013-9323-fc7b793499b4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.253.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.503906Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aff5db2-bf5c-4ae8-927e-e31b74b600cc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.227.234.161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.505006Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ce1477-e862-4079-aed7-1631287b9be6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.71.10.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.506034Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b483f909-4734-4c05-8d2a-ffdf191df74b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.99.15.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.507065Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7062b6c-a4f8-49ea-ae0b-7b7e648db72c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.99.137.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.50809Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0311eb5-27c5-445b-b8f3-474bfdd15ae5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.172.150.24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.509196Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70bb5ef-c0e1-47b1-89b5-a2ea126f0d00", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.64.138.123']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.510223Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe50f0a-3b12-4391-8b37-a7b5d7fb47db", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='172.247.104.122']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.511289Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10be87b4-98ea-4c6f-85f0-6147d8b5200f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.210.127.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.512337Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b564b917-045e-480e-8822-4e46fc6da0e2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.214.198.239']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.513441Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83dbd473-3387-43b2-8d5d-c28a943cb3a3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.15.81.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.514691Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdd774e-e792-4f99-a324-33f4e5b6166b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.46.156.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.515735Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f8382d-a858-43fc-82a9-f0b273a3b6a0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.62.8.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.516909Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7befc79d-4d41-424d-b663-d4bad7a5b2dd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.128.34.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.517941Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b368e4d7-6c95-4aa1-b95f-c81e07458d59", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.161.194.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.518976Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59042f5c-4eb9-41f7-bcac-bffc82170d02", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.60.150.118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.520001Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8496898f-1d36-4c5b-8e4c-6623c828d47d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.179.174.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.521117Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a559826d-d503-4cfd-ad4d-c80333257697", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.180.123.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.52218Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135f666a-d9c7-4c4a-9338-6cebc145e358", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.23.68.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.523245Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e37dff-f626-4de0-986e-2d20eecc71ce", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.94.230.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.524279Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795dd712-8eff-45f5-bc27-cdaa56fa07e1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.114.116.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.525361Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02d9083-88d8-45f4-9136-688879d17c74", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='182.160.105.219']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.526616Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ffeb06-7e7b-49b7-96f2-79a82d82a9f5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='182.208.98.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.527632Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec3c011-3d86-4b31-b59c-88b2340160d1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.98.9.246']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.52868Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9261707-218e-431f-bd68-00146bc73853", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.106.58.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.529727Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d65e9b-7d92-40e6-9e91-c02c8dbe9437", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.150.155.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.530776Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d203c9-c2fc-45c0-ba5a-193099f03a90", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='186.96.156.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.531792Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3d539c-9347-49ac-8e16-26c8e7de54c5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='186.210.200.32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.53286Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9626dfb3-a45d-4a28-bb40-eb80c402f50a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.51.208.158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.533975Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74fcc4e-0b4a-45c3-9a07-93984176a2a4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.114.250.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.535056Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002680e4-5ef2-441a-b04e-b04918e935e4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.166.5.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.536141Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8487291f-6eb7-4045-8dac-9dae47168546", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.166.58.179']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.537415Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72705054-3ace-489e-8961-b35d9d179c62", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.127.173.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.538554Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56733e93-83f9-44fa-966f-5463485c6209", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.129.87.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.539605Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cd7d88-464f-41fa-9726-0ceb43164e8f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.226.3.89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.54069Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31dbde61-4696-4845-b940-725306352e1d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.104.25.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.541776Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f751ac-8c9f-49be-871f-3659b05b2847", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.104.31.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.542853Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52425fc5-d68d-4a6b-b62d-1fd8f4339b39", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.111.211.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.543931Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accecda7-1765-4fa6-92d2-66d3d19fcc8e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.128.241.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.545079Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6865aabb-08d5-4d45-bcd2-24419dd8a321", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='191.101.157.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.546165Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bf61ca-3c5b-467e-baaa-04afe1f9fcee", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.29.102.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.547254Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741610ce-4333-4a63-951f-20df3447fa73", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.58.6.45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.548378Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d35861a-b560-48b7-b403-31a586815619", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.154.80.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.549737Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dea2174-5f87-4396-8e16-469817828d55", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='196.65.218.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.550817Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c561679-a3ed-4f43-85dd-7cbf413ed2e6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='196.189.187.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.551891Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a43ee96-f150-4b28-9906-11b91cf13a2d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.46.152.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.553034Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c492440a-0d1d-43aa-b66f-8cc7c27c3506", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.98.62.199']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.554181Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f698778d-9d7c-4933-b405-d7e94e3103c4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.124.240.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.555243Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbe16b1-6765-4599-bc40-abeb26c1931b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='202.4.42.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.556289Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a01eee-fd5b-40db-81c3-11e5ab4668b6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='202.157.184.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.557432Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3e3cdb-2406-47a0-ac11-b0586f8fb012", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='203.127.161.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.558542Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e82a32c-d48e-47c5-a0a2-2bd5cb8384c9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='203.243.52.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.559609Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65b507c-5807-4b36-8212-d6c4cff9e9cc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='204.14.8.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.560941Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d83735a-06b0-4b29-9cf9-98cdf5b25b42", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='206.42.33.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.562038Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ea6a74-aa64-4754-b210-fc48cfa40db3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='207.249.96.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.563109Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55379d7-6070-45c0-8f68-85af1fc53a67", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='209.141.51.88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.564176Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692f5b9c-6185-40d5-a68e-62bcae54afd2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='209.141.53.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.565295Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcdb572-638d-4c9d-a68f-898044d792fc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.57.67.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.566432Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23dd0cd-4fc8-4e6a-9c8c-849f1877d4dd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.75.219.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.567594Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ce0f6f-e517-4878-a7ae-43204e7da710", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.220.47.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.568702Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6e9a17-ef3f-41b1-86b4-c0f638e524f2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.145.140.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.5698Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe1e581-6ac6-4d66-96b3-065ded8fc534", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.154.137.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.570876Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba1f5bd-2c0f-4aa3-81f3-0ba84e814260", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.157.29.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.571982Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4bfaae-439f-453f-b0d9-0b07a745c75c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.161.68.100']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.573291Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c261e0a4-f884-4d4d-b581-971a31115638", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='219.78.72.195']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.57449Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb42eefc-4471-4e89-ae26-e4faea297af4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='219.117.237.123']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.575564Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b482d6d7-6d82-4464-a233-7cda6f2c5e8b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='219.249.140.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.576676Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3146a417-129e-4423-a0b7-9f8bff5bee46", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.81.239.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.577811Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e571158-2f8a-4959-902c-708d1aa00334", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.139.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.578855Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65598fc-dbcc-4cee-8312-5f9fd1aaa9e0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.162.122']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.579929Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34654ae-dbea-4d41-8892-1b0762f339e5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.183.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.581122Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0377544f-ca88-4e82-949f-a2876b5d2a78", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.133.83.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.582211Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac845ab-7e5c-47b5-a509-4ff87dfe2012", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.133.141.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.583273Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914153f7-633a-44ec-b160-e0894ad678b2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.133.142.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.584607Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785260c1-4111-42fc-a45d-283717fb4733", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.6.194']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.585689Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d8a655-270a-4742-8216-868352dabfde", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.81.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.586772Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544b2916-5fb0-40b1-b674-7400214ff2b7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.135.0.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.587829Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd302e6-2422-4d97-aec3-c058616277aa", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.153.108.222']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.588954Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb2b269-82e6-47a2-8e19-93c1b46a2906", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.155.2.239']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.590046Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3f1932-afc0-4969-b384-f87dbbd5e635", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.118.28.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.591096Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1045bbb8-5808-4ab9-83a1-6c0714291faa", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.120.45.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.592174Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650c39c0-018e-4376-9612-3e1ad0db86be", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.120.191.232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.593339Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f1631c-d9dd-4eed-a1cb-55f2a132083f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.90.122.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.594424Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f35fb0-0495-425b-83dd-289da6d9c6ca", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.595506Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c5e2dd-5315-40dc-bb79-27a68473824b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.596801Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bef08d5-faf5-4df4-a3c1-5c5c73ed7c69", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.597943Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9c574d-0206-41b0-8677-ccede6430f35", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.134.144.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.599015Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04631ca6-5736-47c5-b2e3-e7e39ba24172", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.141.32.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.600177Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d6b5ff-1b81-4180-9d92-6792319dcb9f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.210.101.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.601296Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ac673e-08ef-40ee-8296-9a57db5f3b3e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.36.234.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.60232Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9a45f2-8653-4e08-9196-0a65ab6eccae", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.251.235.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.603387Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4272ad99-9fcf-4f68-855c-bc0d33c20563", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.94.93.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.604474Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7c5e86-bb23-40ab-b011-05510e85c149", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='89.163.215.86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.605649Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c3d49a-3844-41ff-a82c-218dedd29a16", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.606781Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260f5e77-1cdf-47f7-aaf0-8cd1614516f5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.180.143.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.608051Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1682839d-520f-42c3-a96b-83d035c456a8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='212.129.7.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.609211Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04aec569-63c1-4535-b4cb-b7ea5e41c31a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='217.117.14.250']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.610258Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a0babe-f899-46e0-9deb-8dccc1e61e72", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.248.29.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.611302Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe65a38f-e125-4056-b23f-504656c478ac", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='52.73.169.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.612343Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c367b8f9-87e7-4703-b92a-b5f1e20810f4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.170.226.12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.61347Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b1fef9-8df4-4284-a2ba-fa20c5210abe", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.14.209.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.614605Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5032ff26-e474-499e-a5d4-902436849bc4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.14.209.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.61563Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af9f9fc-543b-4a44-be01-b4b7efcc59f9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.14.209.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.616761Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b36931-45d8-4f5a-b3c9-ddc030e2fd16", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.42.19.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.617931Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2849f7-daf2-440c-911a-2ffbd85e4387", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.618988Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208a5176-ce11-4749-9742-23b553c8ff4a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.203.255.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.620207Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966d61c0-1a1d-4ea2-b6c1-4b570183af84", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='184.105.247.244']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.621326Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46835732-649f-4c7d-9dc3-055ec550e59a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.94.111.1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.622427Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dee57dd-c3e1-45da-a276-41278d52216b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.199.100.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.623455Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52795a25-df84-459c-aee1-c3ab82c1145d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.235.24.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.624561Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b16f0b0-927f-45ed-b5ed-0fbce4cdc5c9", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.210.31.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.62563Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3e97d9-bda1-4c24-b1b5-a1e603fb8e01", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='1.28.32.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.626681Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fdbddc-3906-4a1f-a3be-8e3050285488", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='1.34.63.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.62772Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b2b5f6-ac67-4b31-8f7a-c44e7c1008b6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='1.163.16.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.628822Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c247dbe-2853-47e4-9492-e01715e949cb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='3.111.40.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.629916Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73cb94f-8db9-4afe-a35b-b09b8e8b117b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='8.242.217.91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.631179Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8504230-2207-432f-b8c0-dc4b1847f527", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.7.132.246']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.632216Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fc38e0-f08f-408f-91f3-7c0ef6661db5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.40.18.223']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.633303Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac35a2f-b243-41f9-a962-4b372caf1f2f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.232.243.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.634355Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0287888-fa17-42cf-a65c-8cd6cbac461f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.232.243.151']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.635391Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2cc705-2e9d-4a8c-b522-10028c26c7b0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.87.216.93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.636455Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73435028-3be2-4522-a81c-20e7e140c7e8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='23.224.230.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.63761Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e17dd7-79e7-45ed-a5d4-d7e644f09fb6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='24.128.124.207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.638704Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd92a820-af7c-41a7-b3ec-a1892c9d0a46", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='27.109.132.237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.639739Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556438b8-8637-488a-b24e-091184e86c0d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='31.41.244.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.640887Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36df38c-0666-4e4d-a235-6a0765500baf", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='34.244.17.83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.642022Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c58d1c5-5a34-44fb-90d5-e17ef58f6c36", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.82.102.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.643727Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b39f562-9259-40f8-8bb6-208fa18c84de", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.230.211.45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.64483Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9351bd2f-3e4b-41d7-b10b-eb8224a4b507", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='41.59.85.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.645928Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b8c444-1897-4479-89ff-a8067cd36e6d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='41.190.51.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.646993Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcbf755-4fa2-4a87-a21f-61e6cd3de366", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.184.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.648045Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43c3d60-1a65-47de-a896-bbb165617b9b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.154.132.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.64919Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d016a26-4544-4753-a47c-3d64ab4c307f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.154.229.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.650213Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28562527-6e96-4fcd-8030-c39a6a1c2212", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.156.60.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.651271Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9691c2-0623-40c4-920a-68b66296d92f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.157.3.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.652291Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2172af3-349e-4f93-95b2-fb9d2659074e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.116.14.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.65341Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8565744-a06b-4a8c-9207-9e344709f777", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.119.85.88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.655001Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51aa7cb6-40f1-4aa0-9c15-0a2991384a2c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.245.204.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.657115Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78592404-fa5d-4797-9d69-efc69c64309e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.101.31.237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.658862Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b232c3e-f714-4e9a-8f7c-e5b49195c84e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.101.223.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.660643Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75546f3-77d5-4e68-8c0e-921a9f119e4a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.83.74.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.662412Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c4c3d1-8409-496e-96ed-eda32939128e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.145.215.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.664239Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0b36bc-0296-478b-a67a-0daf9710828e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.178.139.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.666223Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78edcdaa-326d-4917-b0df-169bcf765ae2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='57.128.11.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.66806Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174171ec-fe2c-474e-9db6-98fac433b345", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='58.75.221.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.669735Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7095b097-90ba-44c3-96da-50d9778fc0dd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.2.52.122']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.671348Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796e8230-c6ba-4f0f-a2bb-004350c75940", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.5.5.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.673039Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36d60ef-2614-4e3e-a9cc-dd40b3d045b8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.17.66.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.674632Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961a7d98-30d5-4348-b88d-2661443a3b7c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.30.158.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.675731Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de0f9ec-0684-4f10-8dee-76d528d095c2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.18.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.676816Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046e9d17-b49c-4b74-ac4d-4fcb4ee0f0ae", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.110.63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.677856Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e0bd0c-7aa2-4e19-a029-1b8aee8c2a7f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.148.203']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.678907Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d7f4f2-8c68-40d4-9f49-ad8029cb9f82", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='60.50.99.134']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.679954Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51351842-89ab-405a-978f-8c6313668467", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.75.40.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.681051Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8688de-6ae4-4b58-9d6f-230782340b06", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.82.172.192']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.682101Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7389119f-550a-422e-afc1-76f1316ed119", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.683167Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a542be-8074-410e-a59a-50ef5ff5ca9d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.68425Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e77b1f2-894a-4c06-888f-d0c04bef7a61", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.685575Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38119a9-c8fc-409c-8227-07fe9a32f441", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.68662Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de6e3b2-3c98-4ab2-b80d-193f72882ca6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.687651Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe500c5b-45a9-4bbe-a881-02fe2c63570a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.688725Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbcb1d3-008f-4aa7-a07b-957f33c7ee58", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.689805Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56261dd8-5fb8-46d9-996c-90483d1bc6ce", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.690851Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4878bf8e-a2ad-4784-9e0e-a423f787a943", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.691916Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b06a38-0489-47ff-926a-4b247bb08ae1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.693049Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143f3561-31c9-49e9-be26-b3e96617f88b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.694128Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a3f410-42d6-414d-8bde-f4cdbbedefa6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.69516Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5104cfe2-adb2-4ac5-9603-6e45e3e7e113", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.696295Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51daea91-7b47-4813-9db0-1219a335e40a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.697638Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72306b02-8520-40cc-91f1-d3fd8e6208ba", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.698758Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c73f9bc-3f35-41c1-bd55-99620a8e17e8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.700412Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62533a0-daca-4ec0-b175-d0c8f5f04aeb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.70171Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a23bb5b-ea2d-4d52-806f-c0d9baf1310e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.702746Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b214a0f2-d59c-4135-96ee-8f695908d431", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.703785Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0752b6ce-40a1-4223-8a58-66d1a817f235", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.233.50.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.704944Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320283cb-688f-42c8-86ad-17a25ae9e0c0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='64.227.99.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.705999Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a31cd6c-6fe0-4280-b945-837ca61b0407", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='68.183.212.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.707102Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f091a1-570b-4742-9ef8-056a8996cf2a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='69.49.230.238']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.708194Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5cec77-1f4c-42e1-8329-b5301ed38d10", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='70.121.76.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.709543Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6511f127-ba4c-49ec-b77b-f1158f65927f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='71.174.92.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.710609Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a0e628-a689-41e7-8c00-30a2c3f88501", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.139.10.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.711681Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2389a0-a18a-4a23-bf30-0e6f573bbb5e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='73.22.37.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.71276Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2800d06-996d-4314-9a4b-6b3b3f1bf8b1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='73.61.120.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.713887Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdeeb5a7-140b-498e-b12a-7170b5762ed6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='75.51.10.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.71497Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46b46ea-eaef-4d16-95a3-09b87f583723", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.45.153.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.716068Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995813c3-a40f-42dc-8696-1a37c8d77c39", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.153.9.237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.717222Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97317448-d8ca-4076-8f8d-38f8d87f02d8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.153.228.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.718336Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc012e7b-7944-40de-ad05-d72d9389f125", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.234.44.196']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.719431Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246dcf4c-4238-482f-aa5f-1081f22c196b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='81.70.163.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.720626Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a9a718-4ab2-4a71-8d9c-68f3b66eeeea", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='81.141.50.120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.721931Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a20cba-a6ab-4134-8895-edafe741e539", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.64.32.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.72321Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fa8d9d-6956-4a37-a99a-a27492b1ad6a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.142.2.63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.724255Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c388735-96dc-4245-888d-bcd9428871ad", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='83.165.106.80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.725372Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac307500-8147-43ec-9b14-3e468c4a0f32", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='84.39.254.211']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.726499Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ad85cc-926f-479b-8d1e-b3e11ba28be3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='85.237.57.193']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.727556Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d33539-ff5f-49ab-820a-d17f6acc6bf3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='89.252.140.21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.728615Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4910281f-8d3f-4461-8ef1-793ccc45dd25", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.222.216.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.729686Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe3d9a5-f6fd-4377-b65e-14efcf1177d0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='93.163.185.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.730894Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bf13d9-4b65-4e9b-97b7-2205c9a3a8ad", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='93.201.89.69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.732005Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063055c7-c8aa-45b6-aa91-fe8593c5a3d4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='93.201.89.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.733365Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e6d609-2d03-4668-af82-5ddb81ad3c60", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='93.201.94.63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.734517Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc19f3d-a200-49df-bf4c-686b7775e5bf", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='96.78.175.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.735593Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a54817-15dc-4fb7-aea9-a8504396bcf6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='101.43.60.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.736693Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705dc10e-2fb6-4fb3-85f3-a23be328628c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='102.128.78.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.737828Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ac1440-2bda-460b-9622-b1420fdf6896", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='102.223.173.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.738867Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80474a3a-6dab-4dca-8722-fef2186af58f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.111.23.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.739894Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938184a3-9699-45b2-8ebe-b018743423e4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.179.242.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.741006Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e596146e-0220-4382-be8e-abe8b7a2c31a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.186.0.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.74227Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0acbeb1c-4c34-45f3-a3b3-3ca145d6a629", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.200.21.89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.743316Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2529f1-9eb7-448f-a375-65ed61fa9240", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.246.240.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.74465Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cac0c4c-7149-4b67-bc15-885abd6a2287", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.244.75.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.745895Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5c8c6f-10b5-4fff-8f17-62217e058ad7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.1.107.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.746942Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a473c7-70b9-476b-b7c5-da014de0837c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.105.111.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.748Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc497d6-d580-481b-926c-6ff76249b466", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.173.80.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.749138Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4950d14f-d833-4233-9d02-fce709ccdd90", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='109.115.187.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.750172Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f09f23-b273-42a6-aa4a-588387c707e2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='111.19.156.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.751177Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d467c80a-9b20-4b7d-ab8e-43a1b9e46e55", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.11.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.752225Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a664cbea-c0f0-42ed-8238-25daf232c1eb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.79.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.753548Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c315d16-4468-434b-bca7-d4b09ea25ece", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.94.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.754715Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229ea930-8d47-408a-ae2f-1e7befc69184", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.109.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.755824Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8cab27-42cf-47f2-8674-df4e38f1cf1f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.143.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.757151Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b40fae6-625a-44fa-ad04-2e7e028aa0a2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.251.56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.758174Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436767d6-311b-4836-a72c-76013c7a25da", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.254.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.759184Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2316577-da67-4cd8-bfc3-51f4683f6925", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.143.139.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.760191Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469216a4-9980-4fe6-841b-6a0fb0606d0a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.176.81.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.761279Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e92c13-3201-4d6a-953a-9c2a2608e086", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='117.254.83.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.762641Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4879ecbf-86a1-440f-902e-22153bdb6be8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.150.61.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.763645Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d409762a-4cc5-428b-9b12-de803cd33695", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.233.210.228']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.765036Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb975064-3dfb-4bf9-bf23-8a88221d4669", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='120.28.194.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.766095Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea98c1e-4ab7-4371-8728-3bd22959e621", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.2.88.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.767245Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489c6f18-25fb-4e7a-8eca-30dcaf283441", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.134.232.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.768335Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e216e4-380e-4b57-86ad-aeee1b8a6646", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.135.63.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.769733Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8ee686-5f6a-4910-898f-7693660f30ab", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.143.215.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.770816Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf3e5f7-78f0-4a4a-8ad3-2f82f364cfba", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.179.203.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.771867Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2517f1d-0be1-4a65-a1f6-efe015588b06", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='124.219.166.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.773025Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4602c961-79b9-4489-b24a-9f53c9d92f8f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='124.222.87.63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.774084Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782bddec-c4e3-4ec3-ab71-4b7e7c3f7338", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.26.200.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.775168Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a72e63e-1cde-4b7a-8dec-cb91794e31f2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.27.229.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.776234Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ffa00d-0408-480c-ac6f-6f0f1b2c749c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.228.30.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.777354Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2db1d1-7ad6-4a4e-9017-0196c82fac8a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.228.112.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.778392Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8380789c-8d50-4ba8-8042-bfa37f466a04", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.228.236.33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.779461Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7322586-8688-421a-98bc-1d4338daa2cd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.229.44.213']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.780812Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4066cd-6209-4eb6-8e4b-bc681d856a01", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.229.176.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.781859Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5ae155-64be-4309-8671-865016bdfbb2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.1.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.782907Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e236f716-cf11-4757-b189-bbd2e078b95b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.68.197']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.783951Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e5e11f-ddc0-42da-82f4-82c7460998d1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.111.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.785054Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fb2ea2-aa66-49e8-8347-238de2f68d90", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.192.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.786102Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbb4068-9427-428d-8f98-9bbbc47e51f5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.122.36.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.787143Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0889494-ce5c-44d0-8a37-2e2174ce6715", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.209.212.125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.788183Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a34cffe-405a-4aaf-a4fd-f6a9b431f4e7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='136.145.151.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.7893Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854df4b2-e358-48c7-b4b1-98b29c7f98fd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.0.243']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.79035Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae41bb1-9374-45a7-8ff5-323e5d1564ae", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.225.34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.791378Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac2e307-3615-480e-9beb-aab729b3f9e5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='138.3.208.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.793132Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39826c8-f091-49aa-a788-93c8a5ee05a8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='138.68.8.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.794162Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc17add7-c101-49a4-9903-dc2d5df9fcd7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='138.68.99.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.79516Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d91890-1381-46e7-9929-9fe11c931567", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='138.201.246.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.796175Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60990d17-1a4b-4b84-9b28-513a85fee143", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.120.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.797313Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e0a255-b70c-4599-b770-2b015e673943", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='140.238.3.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.79834Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50176d8-f300-470d-8053-9076b21914e1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='142.93.50.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.799349Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369d47e6-70f6-4a9b-be4c-bc0f834c151f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='142.93.201.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.800393Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1cddbd-5d08-4439-8a7e-683c6cfbdb62", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.198.94.205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.801501Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3616b64-45eb-4bd4-8a3f-c0c37fe40664", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.198.139.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.802526Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e99dc31-907f-4eba-80eb-5b14e7e71638", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.198.161.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.80375Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80ec62f-8f54-4872-aeed-881139c8ec2e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.244.162.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.804819Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf1d784-cc95-4845-be6b-c77add10c876", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='144.24.131.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.805875Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7333d689-c3a1-4eac-90e6-b8d6a06fc842", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='145.239.90.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.806895Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205c4574-d943-4873-8e37-ae3c786aa403", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.161.2.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.807939Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d232b6-ba27-4eeb-9d45-66e8036b11b8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.182.205.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.809004Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c42e4e5-6e5a-4fca-8ec5-adb9e960333a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.182.216.228']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.81001Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6564b778-9162-4ca7-abb4-7e1ab51f79c0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.182.244.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.811003Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5baf9f9-6b82-4898-8a53-54a02e61ffae", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='149.56.111.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.812047Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44ccd35-b5e2-4fbc-8c66-aa727e19b315", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='149.202.74.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.813127Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e74ec52-6001-44cf-87ce-0fb18bfa5186", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='152.32.174.199']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.814172Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ba0291-2357-46c9-a090-9a4c147796cf", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='154.221.30.217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.815431Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2ce915-1252-4048-b639-c5464cf766c8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.230.98.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.816481Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f6bbd1-77c2-4e36-931f-45751c697eac", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.230.209.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.817546Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c77ff4b-ee25-48d6-94ae-b9c812d9368b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.230.234.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.818615Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ad4279-26dc-4325-9af5-575591086a67", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.245.227.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.819626Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a57522b-d23f-4f17-9255-d4056da0edc3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='158.69.92.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.820671Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39222f7b-15e3-41d4-b44d-6f590c24ca0a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.89.236.71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.821739Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c3cdd9-185e-4875-b3fa-a183a662ea0e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.203.72.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.822759Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce92c34-74ed-4edd-b087-83c67fb7ffd5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.192.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.823752Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca24b773-3653-4872-91fa-a92f0a85a6cf", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.196.187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.824855Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae068283-9184-48fd-ac7e-a98672c29fb6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.243.48.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.826135Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f647e817-3979-4726-99bb-a92f71ee9e4c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.243.136.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.827188Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26c0994-95e0-4228-a23c-928fea91ed4d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.243.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.828303Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4159c81-2747-47ae-835c-b76a0b90cef1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.227.133.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.829408Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2d5ba9-f0de-4bc5-a5df-bbad0cb8c3d4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.227.161.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.830445Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64d88f8-554b-49ed-986c-5b61b2c24b5a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.232.158.187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.831526Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a073a607-70ff-4185-b1d6-451b312ba02b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.71.209.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.832588Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c2f719-4803-4d5a-9a65-ddaeab700398", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='168.138.151.239']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.833643Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915c0ff8-7cd6-4177-8449-81e5e402482b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.210.46.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.83482Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6763e0bf-1b0a-41be-9a5d-c7fa26dd3259", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.205.4.218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.836035Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae32862-4d33-4656-9dea-becd49c3eb12", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.31.83.83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.83734Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b290a495-2c3e-4e84-a142-a077639e8973", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.38.7.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.838754Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a04389-ae45-4681-86c3-1e599a8fc1bb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.111.173.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.839896Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1a2e06-c7db-4cb1-ae23-1fefef0da4d8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.92.22.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.841103Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8cc0ec-519a-4718-b308-7694e69d52e7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.137.87.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.842129Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a11b6cb-110b-4f92-9261-aa70fb8e9a4f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.137.87.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.843143Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726000f8-2d1e-445a-8565-b1029f925351", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.220.131.211']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.844159Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afe8a1a-741d-4640-9b7f-88ef0ecf9f32", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.88.161.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.845394Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64abf02-97c9-4d42-a7c4-13ab40d11f23", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.128.153.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.84643Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fc506f-dbf4-436d-96b5-186f43995719", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='182.75.216.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.847547Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bd1af4-4e2a-4254-acc3-a1e238c2234f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.101.148.60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.848743Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb9b807-cf55-4fdc-925d-ec5724c51955", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.109.124.228']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.850003Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0c41cc-6fc9-45a9-945e-960e0d4cdeef", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.33.60.56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.851019Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbaff460-5160-4ce0-94ac-54589c1dd3fd", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.188.251.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.852022Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b7c1ee-116e-4abc-a8ae-578add711f00", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.243.248.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.853115Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7e0120-0488-4725-9941-ffd73e2fa426", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.7.129.60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.854164Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e40689-dc94-4e8b-8151-7d1d1142a79b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.109.225.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.85517Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d519bf81-00b8-4885-9020-3461bbaffe8a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.121.236.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.856216Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53d3e3e-1bf0-4d5a-909e-0f6061c2e0fe", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='191.102.254.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.85734Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89554f15-7a75-4e3d-b561-bd150238571a", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='192.210.196.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.858379Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef90dc4-5eb4-4798-bb7d-64a4f72ab8ea", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.110.203.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.859413Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2c9758-eed6-47f1-9311-a3ac23d6188c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.58.6.45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.86045Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a52bfc6-c602-48d0-83f0-765620f8bdb1", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='196.189.91.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.861775Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992c4dba-eb43-4ee1-8a0d-9da86de96ea8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='197.5.145.93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.862814Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a64b04-441d-4ee9-bc9a-4fc583dcc452", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='197.26.19.254']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.863878Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955adaa4-d63f-497f-be9d-202d7ee84b7c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='197.227.21.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.865018Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6c2d6b-9f56-4f4f-8ae2-b89471b0f9aa", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.46.215.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.866042Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba3952f-1176-43c4-9c1e-d0c6ecb44ad4", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.98.58.79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.867151Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5f13c8-45ec-47a0-93ee-53b34c53ba39", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='201.45.248.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.868194Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2d1b8b-107f-4137-b265-62c34988cf5d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='201.184.248.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.869391Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c5cdf9-cb0b-4ca4-b698-cf0d470c5c57", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='202.163.121.60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.870427Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001038a5-1e43-4ca6-9b02-a6af77219e7e", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='204.48.17.233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.871431Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15808225-4c58-4008-aac8-cce76aa345b7", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='207.154.246.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.87272Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9ffaa7-ff3b-4329-bc76-19bd39ef62b3", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='209.141.46.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.873758Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783e9161-b1a1-4d40-b58d-5abdb39450d5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='210.97.106.213']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.874773Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8114ad68-0c50-41f6-8048-604b6f0bc3d8", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='210.123.55.205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.875786Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fecb0fe1-42af-4e65-aa5c-f73ebd2c1e00", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.21.101.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.876869Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a4e99a-3077-413b-8883-da04986c6b91", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.34.45.187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.877962Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180dc8ae-19e1-4606-92cb-9cf37a04759c", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.225.40.153']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.878991Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d8d9c7-cf26-4b8f-8129-33c11b19d59b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.225.41.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.880041Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9deacba-b931-4b95-8d67-4ab116825f8f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.248.12.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.88118Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4526e9d2-aedc-4c01-adb4-9df88a421565", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='212.33.243.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.882227Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b4c42c-13d9-4424-b386-0321a1972067", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='213.164.205.24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.883287Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e54880-b4f5-4b09-a251-bf6f6dbe27b0", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='216.147.120.185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.884544Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978b44fa-d694-448e-9837-70cb34162fcc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.32.106.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.885678Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa75038-7ab3-4fdd-a2af-a3e8f54f1489", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.154.108.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.886713Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43cdfe0-a3a4-44b5-94f2-32cdd20415da", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.158.40.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.887762Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05961d49-f092-4777-bd3c-a2cd6e5fee1f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='219.93.248.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.888884Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6c37be-dcec-4221-9c9e-6de2cae823d2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.25.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.889954Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d8a382-73a4-4583-9422-7ef12ee00140", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.248.112']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.891008Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e965c491-6232-4c29-bfaf-efd954340171", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.143.137.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.892084Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4aee9e0-1158-4f0e-b8a5-22abb5ee7b32", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.228.152.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.89323Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f81ef58-7b61-4964-88db-03344e4db191", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.255.197.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.894265Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e434330-a2d4-4fc6-8988-948976849337", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.147.254.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.895505Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45214fab-ef83-42c4-a817-3ce3d25c0624", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.156.77.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.896642Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b19a844-d761-49da-b950-6b26e75a2d2b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.194.10.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.897767Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f75a712-adcf-4c4e-b207-978e506c36d6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.197.183.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.898967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d960401-ceb5-4517-a60f-fed50fb6ae92", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.90.122.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.900142Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9dd72a-5967-40de-b42b-10610838fc62", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.90136Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53c99bd-deef-467d-8087-2884f93758ca", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.90242Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e8d74e-ab1a-421e-b850-0c7f444f9e63", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.903483Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6de2fcb-5f13-40bc-a69d-5321237caa78", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.134.144.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.904559Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990965e4-3588-45a5-b712-acb79e2d20bc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.141.32.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.907376Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907f507d-7539-4ca5-831e-6152b8cee0bb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.210.101.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.908479Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d8855e-9d20-49ca-84cc-8017a26a7860", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.36.234.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.909882Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2841e034-78eb-4802-973a-182bc63d21de", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.251.235.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.910928Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d464f867-355e-4df5-a554-1a94ebc161a6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.94.93.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.911967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926ab1bf-f394-4c67-8840-ad91ca03c5ec", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.913055Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6f172d-9329-4ff5-b186-2f78932f4101", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.220.167.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.914079Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c546f499-b946-40fc-99ab-0bfe39ae7547", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.106.115.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.915088Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0618938-958b-4800-a14d-68aa6d899e2d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='212.129.7.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.916144Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitae": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa75038-7ab3-4fdd-a2af-a3e8f54f1489", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.154.108.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.886713Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43cdfe0-a3a4-44b5-94f2-32cdd20415da", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.158.40.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.887762Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05961d49-f092-4777-bd3c-a2cd6e5fee1f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='219.93.248.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.888884Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6c37be-dcec-4221-9c9e-6de2cae823d2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.25.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.889954Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d8a382-73a4-4583-9422-7ef12ee00140", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.248.112']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.891008Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e965c491-6232-4c29-bfaf-efd954340171", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.143.137.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.892084Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4aee9e0-1158-4f0e-b8a5-22abb5ee7b32", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.228.152.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.89323Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f81ef58-7b61-4964-88db-03344e4db191", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.255.197.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.894265Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e434330-a2d4-4fc6-8988-948976849337", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.147.254.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.895505Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45214fab-ef83-42c4-a817-3ce3d25c0624", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.156.77.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.896642Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b19a844-d761-49da-b950-6b26e75a2d2b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.194.10.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.897767Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f75a712-adcf-4c4e-b207-978e506c36d6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.197.183.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.898967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d960401-ceb5-4517-a60f-fed50fb6ae92", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.90.122.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.900142Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9dd72a-5967-40de-b42b-10610838fc62", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.90136Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53c99bd-deef-467d-8087-2884f93758ca", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.90242Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e8d74e-ab1a-421e-b850-0c7f444f9e63", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.903483Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6de2fcb-5f13-40bc-a69d-5321237caa78", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.134.144.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.904559Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990965e4-3588-45a5-b712-acb79e2d20bc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.141.32.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.907376Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907f507d-7539-4ca5-831e-6152b8cee0bb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.210.101.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.908479Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d8855e-9d20-49ca-84cc-8017a26a7860", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.36.234.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.909882Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2841e034-78eb-4802-973a-182bc63d21de", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.251.235.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.910928Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d464f867-355e-4df5-a554-1a94ebc161a6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.94.93.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.911967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926ab1bf-f394-4c67-8840-ad91ca03c5ec", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.913055Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6f172d-9329-4ff5-b186-2f78932f4101", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.220.167.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.914079Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c546f499-b946-40fc-99ab-0bfe39ae7547", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.106.115.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.915088Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0618938-958b-4800-a14d-68aa6d899e2d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='212.129.7.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.916144Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitae": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa75038-7ab3-4fdd-a2af-a3e8f54f1489", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.154.108.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.886713Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43cdfe0-a3a4-44b5-94f2-32cdd20415da", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.158.40.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.887762Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05961d49-f092-4777-bd3c-a2cd6e5fee1f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='219.93.248.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.888884Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6c37be-dcec-4221-9c9e-6de2cae823d2", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.25.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.889954Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d8a382-73a4-4583-9422-7ef12ee00140", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.248.112']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.891008Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e965c491-6232-4c29-bfaf-efd954340171", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.143.137.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.892084Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4aee9e0-1158-4f0e-b8a5-22abb5ee7b32", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.228.152.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.89323Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f81ef58-7b61-4964-88db-03344e4db191", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.255.197.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.894265Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e434330-a2d4-4fc6-8988-948976849337", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.147.254.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.895505Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45214fab-ef83-42c4-a817-3ce3d25c0624", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.156.77.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.896642Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b19a844-d761-49da-b950-6b26e75a2d2b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.194.10.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.897767Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f75a712-adcf-4c4e-b207-978e506c36d6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.197.183.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.898967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d960401-ceb5-4517-a60f-fed50fb6ae92", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.90.122.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.900142Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9dd72a-5967-40de-b42b-10610838fc62", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.90136Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53c99bd-deef-467d-8087-2884f93758ca", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.90242Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e8d74e-ab1a-421e-b850-0c7f444f9e63", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.903483Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6de2fcb-5f13-40bc-a69d-5321237caa78", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.134.144.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.904559Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990965e4-3588-45a5-b712-acb79e2d20bc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.141.32.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.907376Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907f507d-7539-4ca5-831e-6152b8cee0bb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.210.101.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.908479Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d8855e-9d20-49ca-84cc-8017a26a7860", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.36.234.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.909882Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2841e034-78eb-4802-973a-182bc63d21de", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.251.235.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.910928Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d464f867-355e-4df5-a554-1a94ebc161a6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.94.93.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.911967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926ab1bf-f394-4c67-8840-ad91ca03c5ec", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.913055Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6f172d-9329-4ff5-b186-2f78932f4101", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.220.167.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.914079Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c546f499-b946-40fc-99ab-0bfe39ae7547", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.106.115.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.915088Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0618938-958b-4800-a14d-68aa6d899e2d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='212.129.7.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.916144Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitaected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.228.152.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.89323Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f81ef58-7b61-4964-88db-03344e4db191", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.255.197.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.894265Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e434330-a2d4-4fc6-8988-948976849337", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.147.254.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.895505Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45214fab-ef83-42c4-a817-3ce3d25c0624", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.156.77.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.896642Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b19a844-d761-49da-b950-6b26e75a2d2b", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.194.10.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.897767Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f75a712-adcf-4c4e-b207-978e506c36d6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.197.183.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.898967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d960401-ceb5-4517-a60f-fed50fb6ae92", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.90.122.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.900142Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9dd72a-5967-40de-b42b-10610838fc62", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.90136Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53c99bd-deef-467d-8087-2884f93758ca", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.90242Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e8d74e-ab1a-421e-b850-0c7f444f9e63", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.903483Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6de2fcb-5f13-40bc-a69d-5321237caa78", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.134.144.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.904559Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990965e4-3588-45a5-b712-acb79e2d20bc", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.141.32.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.907376Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907f507d-7539-4ca5-831e-6152b8cee0bb", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.210.101.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.908479Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d8855e-9d20-49ca-84cc-8017a26a7860", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.36.234.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.909882Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2841e034-78eb-4802-973a-182bc63d21de", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.251.235.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.910928Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d464f867-355e-4df5-a554-1a94ebc161a6", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.94.93.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.911967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926ab1bf-f394-4c67-8840-ad91ca03c5ec", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.913055Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6f172d-9329-4ff5-b186-2f78932f4101", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.220.167.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.914079Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c546f499-b946-40fc-99ab-0bfe39ae7547", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.106.115.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.915088Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0618938-958b-4800-a14d-68aa6d899e2d", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='212.129.7.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.916144Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54fb0ca-c8d7-4f2e-b006-abf951e45fd5", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='217.117.14.250']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.917279Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1702fa96-39db-42c9-896b-7be41a0d199f", "created": "2023-01-19T23:42:59.337264Z", "modified": "2023-01-19T23:42:59.337264Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.248.29.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-19T23:43:00.918284Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}]} ;