STIX2 json for 2023-01-26
Share on:
Jan 26, 2023
STIX2
STIX2 json for all bruteforce attempts for 2023-01-26
Last Updated: 23:01 UTC
b2f0ae6", "indicator--10a47dc0-32b4-405d-a79f-d9fa1327cd67", "indicator--77530660-c7f8-4818-94bc-79cb83a5ac76", "indicator--8a02dd8d-8ca0-47b9-b538-651d53d09baf", "indicator--cfe29e47-21c1-470f-8dad-476ec4dd4c9e", "indicator--41200641-73a3-458c-b8e4-eaa6be1b985f", "indicator--1e4b4b7b-df18-4005-837d-c6959d1a71a7", "indicator--cce3aa20-debf-4236-b906-5fa298582577", "indicator--2d8ebe7b-86b9-46c7-a890-0a22983e1c4e", "indicator--f81f522c-e5b3-4574-8a1e-baa35cecd234", "indicator--3afcfb81-af5d-4b3a-ab86-6e2cceae541c", "indicator--9ee5e391-4ace-4e8a-af1d-4c90fa17a272", "indicator--c0b5d8f5-267f-431e-ae3e-9cc5c6651c7a", "indicator--c42cf4bf-0b61-4741-ba70-9d41f6057a8d", "indicator--1eccc5e4-87dd-4e59-8ba3-fde6d8473b9a", "indicator--b60d97e2-1219-42e3-898d-453a9d6c163e", "indicator--f7744f25-a9b0-41d0-aba9-f7693e448d26", "indicator--06c3c0a3-8579-464b-9c1e-ead0fd9991f0", "indicator--6807215e-bb26-49a4-ba06-2d1cd63cbc03", "indicator--6fe35026-918c-45d3-9f19-f5db7b1a61a4", "indicator--4efab6ce-bf44-484c-af48-8a4df13b9b2e", "indicator--ca23ac09-16bf-47b7-9bcf-9a6ce7bb173e", "indicator--1e2d3f47-d044-4294-ac21-a27e14e81ca4", "indicator--e9113c01-fd60-42ad-aae5-2b7e693ed525", "indicator--f48d063d-5f8e-4a34-ac72-97148cfb6d69", "indicator--adc05ce4-86ae-4c6d-b4b3-4296e487c588", "indicator--d062bf32-b013-445b-9ae4-1039c014120b", "indicator--fe84e679-aab5-4fde-9c42-a2fae71eaa9c", "indicator--8afc1f98-1cdc-4fb9-a1a4-4a5d58ba05be", "indicator--02557b61-d2fb-4e39-a740-f953b049d233", "indicator--52062f40-0a8f-4db5-b8d6-fe5ba52688c5", "indicator--dccce424-f8e5-4717-a322-cd0ef22489b9", "indicator--2ebd5c6a-1116-4846-8c55-768efbdd182d", "indicator--9bcd667b-1cba-4929-a0de-ca3b1625dc97", "indicator--e292364e-8873-4545-a62e-9e34ee52274b", "indicator--139ee274-07f8-4fdc-ac9c-1111330eb20d", "indicator--3dab6662-3f63-4786-aacb-2e4933d0fee0", "indicator--364c4504-891e-4b56-b690-fa5137ed2b82", "indicator--d98849a6-11e0-4a8d-b1a9-3b535227019c", "indicator--9590cf7f-471e-4722-b50a-848d43798867", "indicator--ae931e37-ba8e-4589-9645-73de2fd61dd2", "indicator--8a5fcec9-3d1a-4eff-9695-301ad77903f2", "indicator--b1419aa2-c449-4d64-9669-8d9324d5c17b", "indicator--29d3baab-ed67-48f0-962c-4818c4b3a093", "indicator--0b982cb3-3166-4734-bdab-a78ef04272ff", "indicator--3f949708-016f-431d-8cbd-0cef85ea0e40", "indicator--881a19e3-508d-4976-a963-32e053d79f86", "indicator--70a6bca5-3447-46c9-a4ac-47c49ed19029", "indicator--8397209c-d815-4cae-831d-92ab78a040d8", "indicator--b469c671-26d4-4d36-9589-6c4f756b8601", "indicator--93890a00-d04f-4205-add4-74e08738b19b", "indicator--1acf080b-5658-41e9-9bfe-aa680e3b7d2c", "indicator--36364144-fcd5-4439-ae86-8d6130424247", "indicator--159ee13e-8a06-40cd-8b43-29a0a6711994", "indicator--3ee5158b-a3a2-4bb6-a4a7-7d84b464e1b0", "indicator--021ebcdf-d82c-4e61-b8d3-cf73d0dfb49d", "indicator--2103b50c-46e8-40d6-9a04-16aa00b61535", "indicator--21207801-6a5c-4ead-a56e-6c4f85bf1362", "indicator--674f64ac-ea92-438e-bf15-e61935cdfbe8", "indicator--668931b6-e1f4-48be-8073-ecd24cf3f32f", "indicator--ad1fc2fe-10ec-4355-a737-69ac3bf315ca", "indicator--baed24f9-4473-4ce4-b1ad-6f37e8996cd1", "indicator--67cc97c3-9945-4027-a309-4e994386a441", "indicator--c84ba46b-6dc5-4501-9377-bc1b620e584b", "indicator--f2712818-a2ca-45a1-bc28-b650a9b8100e", "indicator--00b7db5c-70e1-4028-ade7-934ec7811350", "indicator--61ed1717-7a08-48a9-817f-d6d338bd7d0d", "indicator--0ea2c66e-7353-44a3-9db6-e2179d9d135a", "indicator--771952a1-a7f7-4152-8f9e-e32f0e1ab205", "indicator--b72f5620-e0a7-476e-b54b-fb6ef1beaffd", "indicator--24a6a0ce-8306-4768-b935-76fad719db2a", "indicator--1722e052-f663-4fa9-a62e-e649d70207b1", "indicator--9133b204-b00b-4bd4-8518-f7efa7fef908", "indicator--c02fc196-6a67-4bec-8df8-7da67b695e44", "indicator--9387db1f-85e4-4d67-854f-ad13fb8e74ad", "indicator--d30f9b35-bc15-4b2e-ad4a-386825cff193", "indicator--c43648bc-ff4c-41e7-9eff-c44e2c0e9808", "indicator--c75eda55-6c11-4df0-8774-1e0bf6bfda01", "indicator--7989761b-578b-4aee-a7cf-5f5dca6751f6", "indicator--ff32625b-eaa6-405d-b6d3-9ca84480a365", "indicator--65aa31c7-d86d-425a-ad1b-9440f063b119", "indicator--48b43b47-5a7d-4317-953e-b464256f67ec", "indicator--582bbe69-6b6d-4c8a-a910-8e51eaf5d091", "indicator--6a733825-d3c6-42de-8aeb-86109d816967", "indicator--3196f021-f328-451c-9518-ba7f2d4d0db1", "indicator--c36f1641-51f1-4472-a2b5-3b2c97db269d", "indicator--07ebe97b-9322-4fd3-9590-057bd16cb213", "indicator--40cbc7f5-6a99-44bb-8b1f-165f1fe845c4", "indicator--e987e7f8-a018-44d2-98e7-6f6d4dee4b0e", "indicator--c051dc87-51d1-4478-8b5d-cc8ad9637710", "indicator--aad0e30f-bc4d-4123-a052-783de6eee10c", "indicator--c7b078b7-9563-417e-8834-294db596315f", "indicator--7b4e49c8-ed29-420e-aa1a-a7bc9d110fad", "indicator--7e75e749-c8a7-41b7-bbe7-3635dbb0b3c2", "indicator--e6f3dc63-319e-4e21-a00b-ab4bff3832fd", "indicator--0e0dddd6-d795-4172-9295-248fb75b447f", "indicator--76c872b7-4a00-42fe-bb15-9cfbde5e7684", "indicator--c70fc18a-8aca-4d68-b4d0-7fe0e0c93869", "indicator--d5b69ae3-8ed7-4082-ba60-51528eff0368", "indicator--39a40352-bb16-4693-9fbf-f57aa28e6941", "indicator--8bba883f-6f7f-4d62-96ce-68176fde7798", "indicator--e842fe10-b009-454d-af2f-fd910636abc6", "indicator--3bebcf38-f236-4ce2-86a8-61f9265f0dc2", "indicator--b5cf9baf-2d0f-4651-bb63-b400604a31d6", "indicator--629427ee-ca5e-46c4-a5ba-30e6ac9c2826", "indicator--0e1612ac-3d84-4ebc-9c3d-c6ab0eb8d3a8", "indicator--b2c3a8a6-fbd3-48ba-a0ee-e13c56c841af", "indicator--d1c2b43c-63ce-47ab-97dd-0d9db578c723", "indicator--7bd75b09-e5f2-4ba4-b7df-c72f89118ee2", "indicator--c364b659-13de-4981-8460-0c58e0135263", "indicator--004c59a4-a703-416c-8ea7-97d053216d31", "indicator--29770b13-d7f3-4119-b84e-2b17789c38c5", "indicator--9a159fb7-0bdc-4549-a93d-fa6163e2de8e", "indicator--89ceb54e-5ee3-484f-a0a1-a0b78e0f9278", "indicator--5a40c007-8fbc-431d-a398-a0e2ad918b2b", "indicator--5ffe45ea-fe92-4a9c-b932-165dba9cc059", "indicator--d7df54ed-06c7-4ac3-912c-ad3392dfbe10", "indicator--5c3f8b2c-6c97-4951-9598-9e703a0dc3f3", "indicator--4a91762e-0119-442e-b21a-4c661add24f7", "indicator--7e1bcdb1-3aee-48f6-a5ad-50e96965aead", "indicator--bd4ad301-0e87-4e59-87bf-e312e2d525e0", "indicator--1ac27e22-09a4-4119-9225-a3fb122e7171", "indicator--f467f19a-63ea-41aa-be3d-b0bf92ceb44a", "indicator--96b01059-83b4-4a70-8aba-32be735caf48", "indicator--199f405e-b78a-4b75-a784-6f965a4df04f", "indicator--6cb7d732-56a5-4125-8938-e3a31c41f327", "indicator--86bda2df-4f72-4831-816d-7d4c54b1e6fa", "indicator--b31dda1b-25c9-4500-922e-5d01b7087f37", "indicator--7493c7a0-ba04-4703-a5e0-a6f68afe7ed6", "indicator--0cbca0bd-6680-47b4-9c5a-85a852e99047", "indicator--ec854909-ea4f-46cf-a43a-713e233ac574", "indicator--5bc93637-88f9-4603-83e1-d2755bae1d4d", "indicator--5a5a45ba-71f5-4f34-93f9-5b2c27aa070a", "indicator--196f34d6-05e0-4f97-b535-63cf6749c80a", "indicator--5fa425cc-1a37-4635-85e9-e42aa93d7f46", "indicator--2ac0fec9-418b-4d87-95a0-0027fee2e835", "indicator--2bed917d-9c8e-4fc8-ad0c-9b2fd15d09f0", "indicator--b22182eb-6841-4385-9847-88b14a33cde0", "indicator--b2b74a06-e5de-4aae-910d-9ad249e0c349", "indicator--bc4f235a-b6bf-4e05-b8a4-1d59a9c97e84", "indicator--5c26bdce-c97b-45bb-8714-9e4890d9ba98", "indicator--48f437fe-4160-43c6-befe-cbe546590e2f", "indicator--9100bc82-bb97-40e9-8857-fc9de5be00d7", "indicator--02483af8-20fb-4849-ad51-b818e5f8efce", "indicator--4c83871e-1de7-450a-8b46-b7eb8ca91f53", "indicator--7f3b9430-8ae4-4aaf-8015-fb67272ca20c", "indicator--b36981ca-339a-4dde-aadd-2deb760cf8f4", "indicator--fe894bea-91a6-4c05-a46c-6a42c1fa2c01", "indicator--ba71f987-9e30-4234-824c-9fee241d2739", "indicator--bee60e19-f322-494e-868a-e646a2ff7155", "indicator--97020445-c687-432d-8c58-fa4d8f52e2e9", "indicator--a8e12684-617b-4b8d-999f-b1e1cae02cf1", "indicator--9e0e3486-7df4-4999-8583-189fb0443a08", "indicator--143942e3-f035-44ad-a287-82c8afc7196e", "indicator--3c22f6ea-b57e-4201-836d-6c252d8785ab", "indicator--6b8f085f-ce35-4d2c-a7f8-462b5fc8b65c", "indicator--dc4e8dc0-60c8-43e8-9815-bd82d786571e", "indicator--02221c75-87d3-417d-8e76-73bf957ca03d", "indicator--9a330a14-ba10-4998-8a9d-53f833c879c2", "indicator--51123dac-d298-46cf-bfd5-4577201290f2", "indicator--62d3d1e7-2017-49a1-9826-216103e96074", "indicator--b3e9fb28-9d3b-41d2-9b68-747a7efcb562", "indicator--22c1456f-c391-4974-88fe-beda363a3fbb", "indicator--0fb8c5a9-4667-4a4f-89f1-77cc69b14958", "indicator--3b4c2cef-a449-47fb-8e60-ff353f7c27cc", "indicator--21359fb1-b3be-4948-b51c-84dbf0b30665", "indicator--4fad64b1-8d15-490f-bb4f-47e574501cd4", "indicator--78c93d35-40b9-4dbd-82e8-2b91895a2c18", "indicator--f253e379-c2f9-49a7-bc05-66318cf63d50", "indicator--5730c0d9-0baf-46d4-9975-2da9e42e3e26", "indicator--1749699d-ee18-4024-a848-55169cb8b959", "indicator--4472f668-fb4a-4047-9859-1bd3841d5993", "indicator--7510c75f-0696-48c5-96ac-d8c28bbcfa78", "indicator--475d4624-c18d-4788-9e34-3b4cf7c3c0bb", "indicator--3adfad94-83c0-4526-bd20-bd9d3d7b18ec", "indicator--7f592421-05d7-4319-a31e-c5833088435d", "indicator--e6b9c85e-7a37-421a-89d1-faa4ca0ccbf8", "indicator--b2164d09-6ef6-4f49-a8b3-b86743ec2a31", "indicator--0c70ce28-2ba4-4eb2-9271-8e11c13f72e8", "indicator--946badef-19ff-42f9-b6f9-12fdb88ca074", "indicator--15c24a17-558f-4099-a8e8-a3289791c336", "indicator--23a55f08-fe25-4855-b711-22ef098988f3", "indicator--ba6893d3-769d-44d5-b537-d08e6a6b98f1", "indicator--084e710d-8a96-47c3-9d0b-678ffbfe47e5", "indicator--07d900b0-4f68-408f-8708-b1cd737fd32a", "indicator--4f74e1ee-feac-4f67-b2c7-ab6d5d8864ed", "indicator--1ab2c37d-216a-474a-863d-c0d5e41503af", "indicator--cc4d0a83-69d1-45ea-b223-b789eb1a0497", "indicator--688b4b5b-2f14-4472-9ed2-6cd71270c7f6", "indicator--d1977099-fa18-4eb0-9134-25919600cf83", "indicator--9fc0b540-8f98-4b94-8b73-849116aa6059", "indicator--7a2eec95-9b05-4b15-9a3e-e66a3b25b766", "indicator--7cf24c06-5a3b-4873-8282-b8a8f52e4782", "indicator--16a46e1b-ab72-44d8-ac18-cc4d3a3ee89e", "indicator--7f37e217-7799-4264-a407-fdcfb2e33f14", "indicator--6384e7cd-ad6f-41a4-ab33-56ff0ee09922", "indicator--b513bea2-2819-4335-a5de-1bf05cf5c4d6", "indicator--671be619-f86d-42fd-bc95-2dbf8a42c54a", "indicator--3fcdc78e-4aca-4b27-86c4-4f987d1f5ed6", "indicator--46352134-b393-43e7-89fc-a064f0a338af", "indicator--2bb0e5cb-7369-4e3a-8664-9050b62fc501", "indicator--577fea4b-8671-42fd-bda0-3f119bcc38f9", "indicator--23aebbe1-9d64-483c-a1f3-b9dd6b08a807", "indicator--7a805c2c-bb60-40c3-ac55-67fa162a9c6a", "indicator--426aa9eb-4371-4063-ac1c-f04a3ca95ce5", "indicator--f10e9c71-1257-4f7d-afc9-94a5533885dc", "indicator--9272a418-3eb8-40d8-9f57-3ef4ecac457a", "indicator--e1db8883-024b-4fd2-aa40-b7733b1a9c76", "indicator--74ea3b62-56f1-4321-8f43-78481ff47443", "indicator--658990b2-ca7f-42d6-b7b8-d84443e42446", "indicator--e84fe6c2-2baf-4f00-a698-8dc4c7b94e4a", "indicator--ac034aa4-079f-4e37-a371-d2e0c166b1c5", "indicator--487b62bf-4c75-4d93-8117-5074aebd76ae", "indicator--777ab91f-f004-414c-9b7e-15882d94d199", "indicator--12fc8570-2bd8-4fd3-b092-c8b0ed2b7121", "indicator--378c918a-b6fc-4ee5-b021-bdf2bc52bf4d", "indicator--d6818f74-c8de-4f12-8979-3e632dc98992", "indicator--330cb1f7-4436-48fd-b88e-5b4a39b19326", "indicator--9ebd0d91-c135-4e24-9752-07271fccfec6", "indicator--d1a4449b-139a-43d0-baba-5108efa4aac8", "indicator--e07e8ec1-4991-4478-bd65-49cc550a0dfb", "indicator--0d818afe-d13a-4fe9-8e8c-9eea254cbc4d", "indicator--e9a9d3af-94ee-45be-b996-103f15b8f78b", "indicator--c29e170a-43fc-45c1-ac01-9c1144b1e6f6", "indicator--a94c38f3-a0ed-47c3-8c0f-addabb92754c", "indicator--4d58bb6f-68fe-4ac2-bed3-f68eb4202baa", "indicator--2c9c7850-1e8c-4ea6-9401-86650f354147", "indicator--2c0d860a-caf8-4005-b210-f10b3d148b9c", "indicator--065ef250-b172-4bb8-aba9-df0bd8db684b", "indicator--99df6751-7f2f-43a2-89e8-80562573aef7", "indicator--d751862b-0714-4f04-93a8-bcaa9e2cfd60", "indicator--b2923cf8-1308-4f52-bf4b-9e3e52359112", "indicator--194e8fc6-67cf-4923-ae02-c65a094ecbba", "indicator--2d25c44c-43fd-41ba-a501-a14afd001a3e", "indicator--16b2d450-b5a6-44d8-86a1-410c3dd18b24", "indicator--94adbc3f-fef7-49ee-9c79-5b810c8069c9", "indicator--4b56d644-ce00-4311-82a3-5559d8dc64b2", "indicator--d1fbc7bf-a20c-43a8-b804-fc6477069086", "indicator--d2eaf56c-4fd5-4aa5-aba8-e51a60b106d1", "indicator--313fd5e8-c09f-404d-9e61-990b1fc72ad6", "indicator--ce48b78a-82ed-4013-8c1c-db122bcd9721", "indicator--65e9bf2f-2c84-41f2-8232-36a98af75df8", "indicator--5ec8b4ba-531c-4606-9dcd-7604b17b1dcb", "indicator--35767025-556d-4e92-9992-20cbd2e77843", "indicator--62289800-93b0-41e1-8b91-23150614537f", "indicator--e7a17755-ba00-4d54-b13d-8504ebf79646", "indicator--f34ead12-1a2c-438d-ae72-5e0c15a89466", "indicator--82844424-aa03-4c08-b7cb-f3112511d249", "indicator--feda3543-b3b1-46b8-baec-4cfb6f68bc24", "indicator--da7d3b13-5aa9-4e6d-af2b-2e761dfa1053", "indicator--9611fdf1-56dd-48ec-9b25-141faa6782e3", "indicator--181e9fe5-fed8-4831-8626-824411235b2d", "indicator--2df6bec5-b290-488d-a691-e38d51d5cef0", "indicator--da20df61-14aa-4f13-add7-32a91ec7197d", "indicator--482986bb-4d9a-40c3-8ce5-900817cca45c", "indicator--4fb7f6b8-8e32-466e-b565-c349c7241f0c", "indicator--f960ffd3-7300-40ff-b6d8-f409fd0f0b6d", "indicator--2bd1bb93-73eb-40df-8add-74c48c19b245", "indicator--5f7190a9-c3f7-40b8-aa2c-0e1b33dacd38", "indicator--10ca4c81-a042-437a-91dc-1a318dd2a49c", "indicator--c08a6628-0577-444a-b066-de8ab6366b3c", "indicator--11a768e9-f228-4def-9be8-2cbb28491c72", "indicator--df741571-0fc2-4fc2-9aab-14e408b8e354", "indicator--2bdeea34-7391-4388-b2cc-0e104a6ee0c7", "indicator--02c2f655-0170-4e5e-a69a-5e7d761ecc64", "indicator--3b6badfd-3a07-4e64-b293-c887b002ef3b", "indicator--bc5a1609-79b2-4ef5-b928-b3cf3df439e7", "indicator--8c3f3c9e-9a55-45c0-bd3f-10d66dc6e339", "indicator--39f2c1a5-392b-4eb6-b773-3c01b792ab86", "indicator--4ce4136e-c588-48ad-9388-38d6278bb17b", "indicator--5617e944-7b4f-450b-a63b-9126cad6f3cc", "indicator--bcc41bb8-7d0b-475c-8cd4-8539ec825bbf", "indicator--14ace43d-ef9b-42f9-b7ab-1db47d39a68b", "indicator--c01c1374-c55e-4598-b166-361b68f4587f", "indicator--298499a1-de34-435a-a5ab-9dbf3760d94b", "indicator--cd03e5e1-8db7-48f3-9afb-64f478fcf6cd", "indicator--5b1f64ca-b6c1-44c7-89ba-a3a30d53d33e", "indicator--13e7796b-f2d3-4842-aa36-751d97fa95eb", "indicator--bc085d83-2760-4f4e-b0e7-ea7930eeeaa7", "indicator--cddd706f-eada-4b3d-839d-3667c801c1d8", "indicator--97bb90a1-c733-44ab-ac41-21d664384612", "indicator--36d53b32-268d-49b8-adcd-ec8def588a77", "indicator--625dcc30-81f2-42bb-80c9-2900805143ed", "indicator--dd3e241e-c0b6-4ff1-8d92-ef0a6296ac19", "indicator--9c5a0ef7-2c44-49ed-86db-1be6c1faabee", "indicator--50a446b0-eb35-4c91-a1b6-f1d78469c06f", "indicator--5c817772-7540-4013-836c-bf56b646d345", "indicator--c6eb3115-0a31-473c-8aea-0593f7aef8ce", "indicator--341cecb2-266b-4373-8985-4f6f42cc5466", "indicator--7c867d81-c1cd-4d36-9101-c0956ab2b5cf", "indicator--5c7da368-aef8-449f-802f-df98394872e3", "indicator--d1899436-9a8c-4d2f-9b93-8ced5ffdcc14", "indicator--3fd98c80-de4d-4c3a-8c4a-773d8ed35d17", "indicator--263c4385-ce61-4aad-bc34-1250778fea69", "indicator--28fb72d5-63ab-463d-8f45-fe9dcd5b6395", "indicator--be4aab4e-f808-4819-94f0-c0468463f9e1", "indicator--c055ea76-369b-475d-bd5e-5d92aa156d3c", "indicator--27b348e7-d419-47ba-a9b9-303d5819195e", "indicator--03c7552b-f974-4969-934c-bd05af189e65", "indicator--da31055c-e19e-4648-85a4-7aca258e45e1", "indicator--e86bf673-b60b-42ed-87b9-ccfff74fc853", "indicator--e9d7ea5e-8029-4973-9515-79ba97f159a1", "indicator--d149f0d1-1c47-4633-9aed-5b1d1a0622e4", "indicator--0953a236-261b-41f2-b6ca-1980c3041600", "indicator--bff41e5c-c114-44b0-9a38-7087ab7e200b", "indicator--58c2bda8-8a3a-4a0e-9172-3be6ece73d2b", "indicator--9115b4d1-692c-4393-91d1-1ab6679d46fa", "indicator--7aa552b8-1b8f-4a71-9f68-402480cdbc95", "indicator--f5b32544-9c99-4c0b-a24c-713c4626a1f7", "indicator--4c3470fc-8f76-4577-9d57-bde79b733ab5", "indicator--723dacda-3508-4775-9361-8ce30707dbb3", "indicator--5181c270-8ac5-45a9-9411-46f475544c5d", "indicator--2faee9da-93cf-4d9b-8705-13b549e940bd", "indicator--cdc59524-f86a-4db5-88d9-f97554ef15f9", "indicator--cc49064c-f5a0-458a-8356-2dfd1aa217e9", "indicator--933727b1-edf7-41e0-93cf-4dee81e7abc8", "indicator--d07d1c80-f5fb-4209-ba7a-5f8536867f8a", "indicator--804993de-0600-46fc-acab-fb8d5676da9d", "indicator--a5015079-e853-46f2-a532-43a5029346a0", "indicator--7e4c6ea4-d03a-430a-a721-78ad3a3b24ea", "indicator--caeb1b8d-47df-4d0f-99af-138dbfce5149", "indicator--fe2638b2-59e6-4048-8008-151ec93312ed", "indicator--9caab13d-e63b-47f2-a4fd-1512a302971f", "indicator--375e294a-1421-4a2a-a348-d73bdd962034", "indicator--df543c56-51e0-420b-9abf-3d59f89062ec", "indicator--56424b13-b5d8-4bac-9555-de46d0f3d90c", "indicator--ff1d43ba-c97a-448f-b164-e3359c876f46", "indicator--d2f8e716-5a5b-4b75-8bb6-4d94f4af6b27", "indicator--5b09f08d-3a2c-4b93-bf79-ce54db39bdc9", "indicator--7a1ab53e-8746-4f79-bc29-a0fce2096748", "indicator--34f6988d-38a9-4aa4-9bca-539534429f85", "indicator--c60761e4-041b-4cd1-adbf-98c155e97aff", "indicator--96315a06-b775-40ff-8ed2-65d08778995e", "indicator--225884ac-6f38-4f23-b681-f7445ed16d9c", "indicator--497dc4af-8715-4036-8b9f-67fe6cf5c117", "indicator--516bc7c2-7629-4da1-a476-3c4f05a33c53", "indicator--6220df42-db98-4457-94fd-d2a9a382a3d9", "indicator--07421db8-3bde-4525-9c52-1f0845d863f2", "indicator--66822fd2-c1de-4fba-a61a-a2d00691d39c", "indicator--56996b19-c610-4c6c-8c84-380f14a619f2", "indicator--e8712798-1ed4-4bc3-8138-ce36e846c0ac", "indicator--9c291385-e455-47c4-9efe-4751488beac6", "indicator--4d1f1480-afc3-4876-a9d4-38ab1f1b921d", "indicator--35a2c4c1-8e06-496c-a012-a8251e155839", "indicator--bcc4bd40-a2af-46ef-a915-4ba444140990", "indicator--f4dee095-9b1d-434d-b289-cee74b0fa69b", "indicator--0d2455d1-d33b-4d94-962e-c5def9f0dd6d", "indicator--13f05b49-a3ce-4e44-b2ee-06e92d8129be", "indicator--84049840-749a-4b88-bbad-7f3d6f3c6d96", "indicator--11a8de08-d986-435a-a583-d66cd43e0bea", "indicator--d2697c63-fda8-4a40-ab10-9a32a629673d", "indicator--7fcdef3f-f4eb-4a90-b3b0-1e123fbbb48e", "indicator--681119c9-9033-4420-8414-74cbd6d27722", "indicator--667bec03-100d-4773-b808-bed1da3433b0", "indicator--ccdeefbc-0ea6-4fee-a15a-438d145217c3", "indicator--6f68e9ed-a53a-4980-9ba9-32682a170aa9", "indicator--7dbee97a-cc70-4c44-b526-445bcafb5bee", "indicator--8d543f9f-1c51-4b09-ba3c-0f379caf17a3", "indicator--60ae138c-4fa2-4b21-9216-c0b8b3a93359", "indicator--3b9163a9-648d-4e01-a218-5093290996d9", "indicator--b0e462a4-87c6-471f-939e-4724baed4f2f", "indicator--0421b7cc-dadc-4271-a6ba-9293ed2d7aff", "indicator--2d0db733-5a42-42ae-836e-a159a6a4cf18", "indicator--9a38df67-ee8e-4090-a89e-d5abfef381a4", "indicator--8a50d15d-ef55-4bc6-9709-597c8c23c0c5", "indicator--51cd1252-4f2e-4dae-b9b3-fd1f9dbcee68", "indicator--46d78907-0ba9-478c-ae9a-edd754243ab9", "indicator--fbe7d787-16fe-493b-8c04-55119ab95ccf", "indicator--39b0ad1e-76ca-4a5d-8cf5-d54f789c3d88", "indicator--aaad3e22-9c44-45af-bc4a-60e6935b8f84", "indicator--93471f16-6eff-44aa-b9cc-4657933dbb3e", "indicator--2861cc25-4fb7-48fd-9ac8-396f5d695f69", "indicator--6f77f1af-53d8-493a-8c89-4e6fff67cb91", "indicator--9b13351d-be76-44a2-bfe4-41cfb7a5054c", "indicator--0ade3349-82bf-4224-89a5-284bf957d3f2", "indicator--336025e9-831c-46a7-a239-dc997188a87e", "indicator--3df0ccc0-77d4-47b7-90b7-58983c23240e", "indicator--9f07b738-7e31-49a4-a935-d267e5d2d7f0", "indicator--d06e6a49-c056-4345-a3c6-8f8d5fee74f2", "indicator--91eefce1-a39f-468d-a49d-de71efaddf89", "indicator--230ddda6-bb84-4142-9ebd-e5736158c6af", "indicator--2faaba1d-89c4-4bac-9d8a-86131285ab35", "indicator--62d323a6-3c1d-40d5-85f4-a6c6cebdec8a", "indicator--2f989d19-ab40-43a7-a849-da29c426efe3", "indicator--474a0739-51c3-47f6-b4f5-0260b8cff6ff", "indicator--099e0bfe-3e51-47dd-a54d-2637c0cf180b", "indicator--e6aec57b-a6af-4566-af1b-954c0a0bbe20", "indicator--de7673b1-b162-4bcd-bde6-8f9358c37e85", "indicator--e8d7456a-9535-4610-8f8a-8d62f0f58011", "indicator--d97c0e83-455f-40c6-8ab4-9a51dafc37c6", "indicator--bbc7fb4e-b3fb-4921-9dd0-7c7340b55634", "indicator--fee4478b-a7be-41b6-b5dd-4cc32105e9e3", "indicator--68dbdcd4-2a18-42fd-b9ea-b4655ed254f2", "indicator--ee688779-b679-48ae-b075-860d9a28de50", "indicator--84b2f542-cc77-4f52-9c7b-2b5e78a90d89", "indicator--fb42105b-e6f8-43a0-8a80-7f8b98af7319", "indicator--91ddcdd2-df97-4f37-925b-e1e006a45cbf", "indicator--a90b2c35-f784-45da-9f21-b09a9bf0ef21", "indicator--0fecafdb-7bd4-47e2-a1fe-773aa6728abc", "indicator--a3afcafa-38ce-4f3b-b262-0c55774404ca", "indicator--b1530228-c374-4a71-b3d7-3a23c8a9316d", "indicator--bf7f69ca-75dc-4dc3-9828-b9587ed7cdef", "indicator--5c64c296-feb2-419a-b9b5-877a314474dc", "indicator--9397d0ff-3794-430d-8584-93809040d3a8", "indicator--9b0adbe3-86c8-4228-8777-46aec98f33bf", "indicator--8d331b5e-9cba-491f-9aaf-4ec08c651bf3", "indicator--da81dd17-f010-4af2-8f94-d6d11297a9c2", "indicator--ada2edbf-1700-447d-b231-7d0ed719d14f", "indicator--c7a249f9-67f1-4292-a301-19c68fbc961b", "indicator--8dba97c7-1dd9-4711-877c-1fc9b8fb4396", "indicator--6a882db1-1c7a-4388-99ef-306ad932804e", "indicator--e709c9ff-99f4-47d8-b8d6-3bf78cdc1db2", "indicator--2b7f5cfb-9381-43a5-a15a-6ec219a74336", "indicator--9b1e1800-bfaf-4a44-a4c0-4717696b863f", "indicator--6908cc74-00ab-4e16-94df-493038f8efc3", "indicator--7274ca0f-88fa-4084-9273-2968661022d6", "indicator--97d695c9-bbd2-4698-a2d2-85869202bd8e", "indicator--0c63a5d5-57f6-4b40-ac0d-4bffb4cd6136", "indicator--d805978e-f66f-4983-8d7f-a78c45689625", "indicator--cfe33774-30b7-475a-b95f-554e32f9e80e", "indicator--aeee274b-6c74-49ef-a9e1-4518075b4001", "indicator--d28f2d58-c1de-435a-ae3d-66e6f150d4ac", "indicator--360de3c9-4405-4f5c-ad00-3d40c870e9ad", "indicator--55e70dc5-a23f-4ea5-a93e-2661fa84f9a8", "indicator--678d0d9e-5891-4b5b-a215-9231e6de2fa9", "indicator--af67a0e3-4b37-4b9a-8ff9-2dfa853793b7", "indicator--4b3f219a-e978-4c7a-a7d5-0872adbf0e55", "indicator--89e25ba2-269d-4494-9289-2badc41de232", "indicator--16123c81-1036-4a9c-9b55-42957b31d6a9", "indicator--b9228c1f-07e1-4f38-91e2-edf94effce76", "indicator--ad7f96c5-83e4-401d-8a31-3372f7671535", "indicator--0c5d5ac7-d7cf-43b1-853b-9dfc4227842b", "indicator--918a21cc-3384-437f-857d-3a7e37f14d75", "indicator--6e5f8132-3dff-4262-9a18-beb6e26eb17d", "indicator--258d243a-8465-40b5-84f7-17a7bc0e0079", "indicator--e91b5da4-1c44-4be7-9a54-03f9dd5a4ba7", "indicator--3e7f75ed-396c-47ae-9372-f14869a03234", "indicator--6d67b351-9cb5-4463-985d-a05791aced03", "indicator--c1c846e7-6a6c-4277-be11-f726873d2e30", "indicator--4c149d7d-385c-4dc1-9e35-df687af563d8", "indicator--52f2896b-18c9-4b45-9e1a-947fd2d368db", "indicator--141a230a-3767-495e-b3cb-87ca0a750772", "indicator--4bc02f74-396b-4e70-8059-8ff92b50574f", "indicator--ddbea2ab-0969-4ec1-8eef-ac66a5f32367", "indicator--0951f803-9394-4822-ac9d-aeee50d74e7d", "indicator--1b5cc08a-0b79-458c-9e2e-6a1c87d1b308", "indicator--260ea7ba-6a01-4ce7-9a8e-949be3afece2"]}, {"type": "identity", "spec_version": "2.1", "id": "identity--c8634930-ee5f-47e6-a968-6faa809d655e", "created": "2023-01-27T23:39:14.168622Z", "modified": "2023-01-27T23:39:14.168622Z", "name": "James Brine", "identity_class": "individual"}, {"type": "location", "spec_version": "2.1", "id": "location--878af59b-5efe-4955-8947-00b394adcabf", "created": "2023-01-27T23:39:14.168254Z", "modified": "2023-01-27T23:39:14.168254Z", "name": "Honeypot location", "country": "AU", "city": "perth", "postal_code": "6155"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56dea068-7dbf-4278-ab1c-247ecb6e519b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='1.34.105.239']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.16898Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbea0a5a-134d-4501-aafe-2e840105020e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='2.56.255.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.180694Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba5024d-2abc-4840-8721-b5d4002d1e7b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='2.228.25.92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.182136Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c49b59f-b274-497e-8376-3e6a7e32c789", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='5.78.54.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.183427Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68214e9e-5213-4a9f-a693-f3ef2494b809", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='5.78.62.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.184782Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1627bab3-caf6-4e8e-9d53-00c4d9f26724", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='5.94.151.161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.185904Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b0b84e-68c3-40fe-b7d0-0b26aeb8547b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='8.213.25.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.18704Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3e1686-6207-4009-be27-38b40b07bc13", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.39.195.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.188429Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22c4d65-570b-4365-9860-8780ecedbf05", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.45.72.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.18951Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6544f87-df99-4d2b-901c-a647a8b14ff0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.63.212.60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.190637Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4aa820c-37e7-41ee-b509-39cbb0c37003", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.169.208.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.191743Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061dbd6e-90ae-4e76-a456-d18950d9466f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.87.216.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.192871Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891e0626-2b45-4282-ab55-5a34667b6c86", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.228.105.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.194052Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace750c5-caaa-4fba-ab5f-c412b3d55d9a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='23.97.229.237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.195157Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f14875-d70e-4ae5-beb7-bdefb522e3d3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='31.41.244.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.196341Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7132e276-f7bb-463c-add7-1674f42114c8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='34.91.0.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.197651Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef9d6a3-b185-439c-94e9-e1a899d1a121", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='39.33.185.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.198818Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47a510f-c55e-48f4-a76a-c60374d89e07", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.134.186.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.200093Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e4f1d5-0f3b-4252-a679-4e76abdf9fae", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.135.145.254']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.201255Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0abade-3cbe-4cdb-8a57-16c289fd0b64", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.210.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.202339Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcba154-2f46-4a2e-b895-48385b5bc0f1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.154.25.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.20338Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2fd622-3717-4b0f-89a3-d3ac5635eeb9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.154.48.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.204519Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc00bf8-9a9b-4e47-be5a-b459cfe3065a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.155.37.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.205578Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4856ea-fde8-4a2d-a9fe-4d4d28d75a61", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.44.25.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.206676Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbde634-f99e-4dc7-b56d-6be13102f18f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.47.68.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.207739Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bad8d9c-b3e1-4322-899c-0df50328cb08", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.92.158.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.208881Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b01ed4d-3561-4bff-aaa7-be970895d001", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.120.69.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.209978Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053544a4-acc3-4a16-b555-a3468ff36648", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.152.65.159']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.211093Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e771ace-4517-4bfc-a3c3-61c8748a7153", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.224.235.24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.212421Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a87faa-bac5-445d-9393-9506e6301b7a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.237.45.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.213514Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20f27f6-33ba-44f4-88ad-020efdd28f5c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.213.218.100']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.214637Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e2a51a-0e5f-4ad4-b3ac-0c4082e6dd03", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.247.31.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.215707Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd054ab8-7953-4d8c-8b08-03b8e76f8dff", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='50.74.5.146']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.216823Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28df552e-47e5-4dc7-bc6f-7f4e9777f8fd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='50.229.145.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.217868Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd171e1e-c29f-461b-8f4b-0f67d15fcf92", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.77.147.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.218948Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6257ce68-1df6-41a6-82f2-e257b4b90c6c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='52.227.167.147']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.220025Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d3491c-f197-4a33-818a-4acad66f2e0c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.10.246.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.22111Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb4e4f7-ec75-4a19-818f-6dca680cd0be", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.11.128.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.22221Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce91f94-3acf-4a22-8e75-2c36c71fa03b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.26.120.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.223532Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785e3960-0aef-4150-a2ae-bd77925d029f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.27.13.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.224673Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b220cf39-e0ed-4a74-ab65-863d6e74da0d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.111.228.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.225714Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f615a1-5794-4fb3-a166-92b4b88693f0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.120.148.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.226792Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7431ea8c-755d-4ced-890f-dba7a563caff", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.34.158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.22784Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc37682-8c0d-4382-a64f-cea898d15773", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.164.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.229005Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625be03b-3edd-411a-9e8f-bf8a2364dd54", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.127.22.97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.230053Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c757bcfb-36c9-4b78-b55a-74b754a346e6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.127.128.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.231112Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0c2221-a822-435c-9680-17ed7f55cd23", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.127.134.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.232202Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e676fb0-af8e-40cf-9ea8-aaefde0b5336", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='60.52.165.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.233254Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1c17ae-2b85-4eeb-b539-d6530d69df7f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='60.53.93.60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.234717Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872caeca-e6f0-451a-bba4-521dedf5d325", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.235774Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1c8608-bb95-455a-9c1b-5b8df0b0e309", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.236882Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab74b1d1-239a-4813-869a-fcad76cb5410", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.237929Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26134fc4-d40f-4f02-a704-ad5907066f24", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.239015Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba8e2a8-e7fe-4e22-adac-a950cbc76bbe", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.240107Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80068ff1-1c95-4bc0-a1f9-f9660a9585fe", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.241153Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8b70bc-402e-423a-8d4f-dae1e0f19f75", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.242195Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e7abf0-e38d-4278-ad18-8250666e30b7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.243267Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f50990-8d67-4dad-9615-5b904d73c36b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.244374Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d949c044-a11e-4073-b9eb-51dc3ac34f3b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.245448Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0369c85f-1a88-4dbb-8784-dd5235748145", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.246671Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3469de-5974-4cfd-aa00-5ec1cfee179f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.247709Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f058ec35-8673-462a-84ff-43231f101f49", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.248866Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfce1068-bc1e-4933-97c8-de540486ad81", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.249914Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b283ab7-8b26-4674-b6f4-9e6cc9fefaf8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.251005Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea20971-1ab0-413f-8afd-3fc11b38557c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.252189Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f1bc24-2b31-44a8-a000-1eb5def87b09", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.253258Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c2af04-27ae-4fbf-b0b2-3ce2fc5208b2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.254364Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc2eaf9-7177-49fb-8e27-d44fe25f61b3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.255466Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3c1b31-fa70-473c-b946-d66de6ae9fe6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.256638Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e7bca9-b72c-49c1-b832-4c3b86238f33", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.220.207.72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.258755Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7a87f1-126a-4bd7-b87e-deffb402a394", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.233.50.171']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.25982Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab13f963-d114-4ec8-8d1e-03fb55658ccb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.233.50.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.260995Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f72ad4-579a-4b17-8a68-22354909d531", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='64.62.197.173']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.262014Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2dbadf-54ea-440c-952c-9f4359bc13cf", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='70.88.3.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.263061Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770f33c7-1b41-43c6-b9f6-4bb5a41f1125", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.5.34.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.264316Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1578bac-855e-41f1-acc7-6cc1fd86498a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.167.55.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.265331Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e188b3-3665-4bc6-bc5b-3c30e66b3fb7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='73.176.216.78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.266392Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6083c7c0-6f89-4218-8eff-21dde368cf10", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='81.25.58.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.267443Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58de9a59-b67d-43d0-8526-dc825401c0f9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='81.192.87.130']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.268517Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4aa157-a3d3-410b-b38b-7ed1f137daca", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='81.222.190.171']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.269583Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3892b277-21bf-4a22-8904-078bc1daf3d0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.64.45.205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.271178Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a127a2a-e00c-4d95-9428-c80dec3e79f9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.142.13.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.272368Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b25fce-38b5-4eb8-ad7a-f0c8da758e5b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.209.246.122']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.273415Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3334ddc-4e3c-4bc0-9e60-279e0128948d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='83.26.46.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.274501Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1a8fe7-d90a-462e-bb3b-5860a08190b0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='84.201.172.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.275548Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0048971a-a0ba-4f04-96b5-fe01680160f9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='84.241.5.56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.276627Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d6a4a8-79b1-4871-b7de-dd23a7ad3b81", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='85.3.112.117']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.277677Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f242b2-047d-4dbb-b4ff-2d6fde25fc16", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.165.131.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.278795Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4363caa-0d62-4646-a438-ab87db5299b1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.240.118.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.280029Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e309d0a5-4dcf-4b9f-9ed6-dc008c8163ca", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.50.144.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.281095Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92a3677-4b4f-4b08-9b9e-e7c02dcf62f8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.255.195.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.282339Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d7ec4e-6cc9-49c9-a822-c6273fb4171e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='93.41.209.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.283398Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f141c2c8-1198-4183-a1e3-ecf5d79da41c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='93.46.120.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.284475Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457cf31c-6486-49cc-b5f5-18737cfa1aca", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='93.190.106.139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.285522Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c85fc7-1b88-42d9-936e-3d424ac720e9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='94.114.221.193']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.286613Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13054f1-9d9d-497d-88f4-68909fc40bb6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='96.69.52.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.287662Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73b68b5-9db9-4543-817e-b1a0d00db3ed", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='101.36.121.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.288732Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644d158b-47d9-4bfd-a3ca-89ebe387ade1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.94.168.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.289786Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1da3ed2-a734-477c-8500-71a8dbcd0d96", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.115.24.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.290901Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0678d4f3-57b7-4791-9d57-b4079c3a34c0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.129.108.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.291964Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faebd1dc-f54b-4924-bd87-13e3cab7b33c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.164.221.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.293056Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd12e5b-f143-4d34-b334-58a33e6fd221", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.187.146.200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.294482Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c4d229-c76f-4a7c-8b47-6945fc2db8c0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.206.48.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.295525Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0138409b-6f15-4cee-bea3-49d5bd0f26ef", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.5.141.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.296622Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2522b5-78a8-48e9-911f-3ff1fc44d537", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='105.225.5.194']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.297671Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f103d6-d775-42b2-8de4-4e3236ed09b7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.248.246.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.298745Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b28dc9-7ea0-4901-af75-c0cbf25709bd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.179.213.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.299796Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d804a0aa-e961-4e26-bd55-ec3bcc536ad1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.189.30.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.300891Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5798140-857d-4bdb-a3a7-b85555d1866b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='109.107.166.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.301946Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59c2398-5548-4d56-b84b-01405d6d419b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='109.124.141.63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.303015Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d0be92-aa02-4f69-8f38-93845e693c3e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='109.248.212.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.304131Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ef1437-437e-4aec-8ee8-12146d9a5d21", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='111.70.0.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.305406Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f14619-81e3-4d0d-a3a1-67560dfb8ed1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='111.243.171.63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.306468Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcaae20f-a0ec-4981-8671-5ce39859df44", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='111.248.1.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.307502Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61efb971-0a50-43ca-b662-cc706b176240", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.196.118.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.308616Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e178359-d0d4-4653-8562-ee3b22e138e6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.217.101.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.309687Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edcf303-a64f-48fe-ab55-577cf6d6bb79", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='113.30.39.191']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.310755Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cefbd7-9b38-48f9-8e42-611557414d3a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.32.125.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.311785Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041feca5-0f24-4633-84b7-2df39059091e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.32.168.57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.312857Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2944462f-95c2-4427-838d-de6f10b28524", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.46.107']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.313909Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47dd1b61-97a1-441c-9ce3-98e7a0f3eafe", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.208.129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.315048Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1be5b7c-4965-4821-b010-d11b22aff652", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.34.195.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.316144Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374e3daa-5912-43eb-99e0-8e2fcb35d501", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='115.142.76.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.317322Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc896f65-6247-42ad-bba2-8a4b7f36b602", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='116.38.235.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.318585Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a48756-0e20-45d6-b2b2-d5a4a13a6707", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.44.89.12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.319637Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e72f6d8-3474-431b-a486-a1dcb4158740", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.218.197.200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.320767Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6abb08-883d-4e44-85b6-0e472cecf474", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.233.220.85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.321807Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821bc174-b635-4c42-93e8-0fe269acf9c3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='119.196.240.71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.322921Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6b12cd-e593-4d0b-bb0f-c63bfcd7f81a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='119.197.66.100']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.324015Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42dcb03-dd94-436d-a95b-4620ec9e735b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.155.127.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.325036Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35978b8-b6b7-439f-9407-33c6ed06b8d0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.165.39.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.326085Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39129d0-f20f-4779-b0bd-b0a264e26ab8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.37.252.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.327124Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f68efd-c5ce-42ff-9902-ba0afbe41493", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.116.98.125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.328395Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13abb593-bfcd-4bc1-9ac2-4d5f162e1ae5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.116.119.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.329408Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4bf976-cf25-47e8-8d29-256d4b770145", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.0.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.330448Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d32ca9-9be8-4ef6-b03c-787ed9df6d94", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.18.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.331451Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c6a14f-b102-4d93-97e5-09db101311a6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.62.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.332512Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c27584c-32ec-47e9-bf2d-b999fcea8b5a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.90.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.333517Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5592936-98bb-45b8-85c6-fff5502c6f8f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.122.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.334568Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f68f4a-8fe5-44f0-bc2a-0dd50cd18483", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.163.120.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.33562Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ac4a49-dfad-4d2b-8fbb-2c19320b0f4d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.165.199.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.336684Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86710cd0-10b7-46d9-b47e-71fd1ef5a1d7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='123.30.149.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.337751Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c67aaa-42cc-414e-be22-ae7a493ed0c7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='123.108.59.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.338884Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dccec33-1b2e-4f4b-b310-bb2c3611867a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='123.241.81.187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.340106Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a31eed1-7875-4be5-97f2-10b844d519a6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.135.116.193']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.341135Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444f008f-d0a8-4689-a357-f5f37da75c65", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.229.176.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.342155Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79185a02-cd97-47d8-981d-dadec33ea627", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='130.25.164.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.343209Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7daa6b62-9f7a-4800-a89c-f7832e3ac46f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.209.127.189']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.344274Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f586e54-f94d-43b0-bb27-f3b97422bf97", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.50.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.345294Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755f1fdc-a439-4f03-8256-eb792c233519", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.135.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.346338Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500985d7-9f79-4f2c-92c0-898be3d6aa2a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.70.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.347378Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b197603-f650-4d23-8ff9-84fc05a36214", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.218.120.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.348488Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82772677-bdde-46f7-85ae-6a42c0d2bc9f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.198.215.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.349491Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1098e1-c912-4916-9a5f-10823de91eb8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.148.67.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.350738Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85ce23c-af12-4371-bf05-595ad0448947", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.55.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.351765Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e916f49-205a-486f-a87f-beefae84e21c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.127.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.352821Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace22bac-25d1-418b-a752-8cff03439cad", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='150.136.161.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.353852Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619056f8-7a19-4ab0-9460-c208cc3bfa3a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='154.120.230.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.354906Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdc26c2-ddf6-4561-93e8-7b5dfdd34340", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.127.239']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.355936Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c937ef-9d0c-4235-bb3a-b7011586331a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.89.230.196']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.357001Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443e9001-db02-4ee5-ad9c-b44c79fb6d21", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.82.253.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.358029Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2aa251-54ca-4507-b04e-0668b77e4136", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.243.48.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.35908Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853e198a-e8b1-4c16-a5a1-bfd9b123bcb6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.226.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.360191Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b05df17-ac45-427d-8622-210ae391f843", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.231.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.361279Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b05d2af-6832-4663-ad55-eca042f10078", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.240.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.362533Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9737ce-9ab1-4245-92ef-426cb09f6623", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.227.193.194']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.363577Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ffe4c8-fa86-4138-8384-ff6b384180f8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.227.224.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.364641Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62392997-302e-4cb2-9a06-98cb6c4a990d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.71.170.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.365669Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1414aa41-4677-4701-82cf-3575f5449497", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='168.228.168.86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.36673Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b13ffb-db8b-421d-8f83-e9ce3a39e9e2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.64.134.218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.367748Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58d5d36-94b5-4325-b83b-d443347725d6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='171.5.39.211']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.368805Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907bfc2b-53ce-460f-8811-8f5450c12d53", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='174.138.95.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.36984Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b4961b-8331-47e1-94e2-2a3d79b2a590", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.199.7.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.370907Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4544d776-c987-40d1-a4cc-c66af26a39bf", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.111.173.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.371946Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6b22c6-4705-456a-b759-b76777390632", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.19.226.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.373236Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d3b388-517c-49f7-aef9-a5d9e774993d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.43.233.9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.374304Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1445d0b3-0a49-4769-8cc3-64e3e76f5b0a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.105.30.132']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.375338Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fb698e-fb88-4b92-b683-81616740660c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.0.212.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.376419Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54c48b2-14a0-4e13-b913-16b9504473fc", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.15.88.130']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.377431Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5a9b72-f38b-4e85-96fc-43260d409093", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.57.193.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.378478Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e4a1a1-39df-4bfc-9a56-6b798fb1b8b4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.64.10.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.379507Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0babf7-f8ac-4c08-ae75-ea0655a6abf6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.143.142.125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.380567Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d932f6-0881-4718-8c4d-ebc1ecd6d3c5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='182.253.131.86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.381601Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b0fa39-66a8-4bd2-a3a8-df63b4bbed51", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.167.99.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.382683Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04557e89-7e38-481f-95b8-f86610db2e69", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.203.114.128']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.383738Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7699d5-9eeb-4d0c-b813-294d61c2ecc4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.189.8.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.384987Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3824557-78d2-4935-a81e-423ac21ae741", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.70.169.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.386003Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdb6657-af6b-458b-b0da-e9c40d8d0e21", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.111.211.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.387031Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c0ac41-021e-4eee-a015-089e3d6e186b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='191.54.249.112']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.388072Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239be2da-267c-493c-814e-b71d5e36123b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.110.203.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.389092Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051f4294-3855-45ae-9518-28b3374c3c48", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.136.163.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.390105Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7f4b21-e0ed-48b6-8204-04c491840da9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.163.153.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.391162Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30b6268-3fdc-4401-aa08-2b02d8dc1b0c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.169.175.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.392223Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b242552b-a557-4083-8e56-abab1c2678b2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.226.194.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.393283Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53189635-e2ee-49a6-b4d3-1379b1fa4354", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.226.194.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.394359Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705eed1c-6e30-4153-b32f-576962e68277", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.81.123.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.395995Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa96b52-fe46-4c29-b167-e34b0a2afb20", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.153.29.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.397076Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b273e24-2623-436b-ba42-6d476d9e407f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.237.128.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.398092Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990bda8d-b09a-4cbb-af13-c31696056c89", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.185.113.129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.399152Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02034021-d145-4153-a86a-139b7bfc1364", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='207.154.223.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.400212Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89227e28-ff5c-4584-b696-0afa88c42201", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='210.59.152.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.401246Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecafaae7-2cca-4fb8-b3ae-eab68b9922e4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.25.119.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.402309Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f06a088-2127-403e-8866-9e9cf676cbd0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.75.183.12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.403348Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5a5a17-c214-4a6a-b687-e3ca1e557e4f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.199.96.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.404446Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af048deb-f1e1-42d1-8766-5a6cc13b8552", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.252.87.118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.405491Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0dea9da-edb6-49e2-8214-98c6842fe082", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='213.74.115.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.406544Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4fc259-b2ad-42bd-8ec7-5ac0939273bd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='216.147.120.185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.427855Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a34c231-094c-4e72-bf4d-f1aa8dbb22ac", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='217.133.34.149']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.429059Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d80f5f-2984-4ba3-ad39-833f35cfa72a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.60.104.1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.430081Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0f0b99-32c2-4745-994a-4e04d53112e4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='219.85.167.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.431161Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8846b3fe-0d41-4ed3-8846-0a5acb01b07c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.81.22.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.432218Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f43488a-701f-4d24-94a8-e31dbb4f3694", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.225.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.433237Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909ffe49-b866-459a-aedb-f8faa29c117c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.158.213.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.434314Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0334381f-00dd-4d5d-bf30-2f4066b29ce1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.97.128.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.435381Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d500ebdd-b882-4483-8b76-cb21c0b92469", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.103.20.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.436615Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b9ed0b-30d2-4bf5-9b2d-3baee68c512a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.148.10.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.437651Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fcab3a-719c-4845-ac33-780716fe3c4a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.170.226.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.438732Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee7935a-8a13-4d19-9fec-9aeda6cfe8e8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='109.67.42.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.439767Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1142e6d2-c42c-49d1-bbf2-c8c987d12207", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.440865Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac8fda0-8977-4de2-bdf2-619f63852d94", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.94.138.96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.441906Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c946bb-43c7-4bd2-b1e2-b2ce27c1cb3b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.248.133.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.442979Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f512171c-505a-4cd3-b112-42ea277e6ceb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.210.31.12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.44405Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec4faf3-1ae1-4d52-9c95-9daa5344fb05", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='216.218.206.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.445091Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df03f784-14f3-4f4f-ae7c-fe29d75293f7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='4.231.222.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.446123Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4eeb1b-1e64-41c5-9a9d-cda47d99fe9f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='5.150.254.239']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.447351Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e11b08-59a3-4cc2-af6e-aa578c69b782", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='13.71.67.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.448429Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01a1d47-6715-43ce-8859-104ad289b185", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.50.164.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.449483Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91be8bee-9dd5-4f64-a5df-b733dd468a5b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='15.235.140.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.450543Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21aebc15-454f-422c-bd7a-b33a39ae81a8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.14.209.78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.451573Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f2ef8e-13a6-4ba1-b2e4-a666b9566c7e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.40.73.192']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.452637Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f071af-7fc0-40f7-9961-15dcbd87ffe5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.87.21.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.453677Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5cd85d-8a90-4fda-b1ad-ebb7fc39c392", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.219.154.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.454747Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2dae9e-39f8-4e23-bdc5-b8f64507435c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='23.224.230.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.455769Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541de752-a47b-492d-a2a7-3c95122c9c2f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='41.60.245.89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.45686Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f033ab63-979a-4a6b-8b61-37e638877128", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='42.200.247.63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.457908Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dedaaa6-f296-4f63-b432-50ecb8bb1345", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.11.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.459124Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f15b429-7e5d-4412-9531-09b2ccf11941", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.32.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.460201Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d039e1-c299-4e78-9b11-d4aed9145d37", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.104.207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.461235Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2609877-7288-4dcb-999e-42d6a8181166", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.156.31.54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.462261Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88935aa-8c21-4b83-8a6e-2e3698a143bd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.156.114.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.463303Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1410656-6beb-4dd1-9fd0-ed3cbede295d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.159.49.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.464375Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80668605-91ba-4539-ac1b-589763c7d424", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.101.50.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.465434Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ccd2eb-b211-449f-ac59-123a21e667fd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='47.254.133.167']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.466542Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a2128f-5888-4a73-b920-ac7f35f29eab", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.148.4.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.467606Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c25938-379e-4298-abcc-764cc61e422c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.148.21.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.468681Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46061be9-fe33-451e-8da5-661ad1e9698a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.15.204.199']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.469905Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc43303-55cf-4cbd-88d6-9d8d6351a1ea", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.250.79.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.470961Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c35bac-6182-445e-a9fd-8be8e22cfc04", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='52.140.103.80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.472006Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e600af6-3a96-43c4-82d9-48ebd66224c7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='54.36.5.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.473021Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e51a9b-7e41-49ea-b855-03157f8910b6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='58.186.85.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.474027Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be31f0b-81bc-428a-8238-b8b9226a3346", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.1.226.250']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.475077Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e623ad5-c4ab-4031-9cbf-dacc106bf513", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.2.236.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.476124Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043b35c1-a51e-4d2c-92d8-338c4874dfbe", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.111.228.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.477122Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d38f5f-a3b8-4a04-b911-3ab2cacd13bd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.120.103.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.478147Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c39ae0b-676f-4386-aca6-3934773f97bc", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.47926Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f33d112-0705-48e8-bb0f-923a1395de20", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.480317Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd52a6b-9b6b-4808-94df-c1635f1ab67c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.481763Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7da990e-8674-4cc6-be78-5d1e21a59f30", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.482806Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72c86ed-6cdf-4471-b871-a90fe195c058", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.483803Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cb1e44-ec7f-402c-a23d-b840eb3f7d54", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.484916Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9e749d-6c2a-4f75-ac84-5f459af79497", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.485923Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2775c87-6ddc-4bb4-9ec7-62e3e4227220", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.486944Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b68eea-1150-42ca-80f2-eef357db6a91", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.487948Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216cd40c-b553-4e4d-bee8-9898eebdcc24", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.489Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae010b9-5463-46e1-ba1a-b4c4ffd840aa", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.489996Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234d9153-6ada-406a-a494-5a84f400242a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.491262Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f568fb3d-8c4d-45cb-b3ac-78988a4e3692", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.492497Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200e6f76-def2-4652-ac8c-64ac0b7836ba", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.49352Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46432113-6912-4f02-9fa0-59773977e219", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.494573Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47431247-58eb-4131-8ea6-78b4201979d0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.495624Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ac9d46-f309-4545-b8fe-a72917386e1a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.496691Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f10d8b-089b-4777-802c-3e4b787b0c1f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.497707Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e344ab-d889-499a-b1dc-dfa6fcca34e8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.498746Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67144441-7b59-4a3f-aeec-a8446b42b7b0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.499751Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985cef64-7f26-4429-a302-fe5302975f65", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.500853Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c08c84e-eba3-4669-a83d-cc2af6cc5924", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.501882Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115bfd59-59c5-419b-bbd7-7451c581e8ff", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.502964Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3e8ff4-2504-496f-8054-708729856818", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.504186Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f62bf22-824f-40aa-9531-6f871e4d1387", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.505227Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc969418-cd65-4f8e-96da-4df83e04b14a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.506254Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfac4c2-7200-46e7-86d3-bade0f98d93b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.507297Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fe4bb6-538b-4c93-b23f-ad054352e233", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.508374Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb988aae-9213-4c98-843c-89ffec69784f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.509438Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985f892d-b63c-466e-ba70-2e565ae26b12", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='69.55.54.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.510522Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91e68c4-4702-450e-a8d3-a815aee29943", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='74.82.195.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.511564Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc20cb5-dff6-4084-88e9-f6dcecd39f7d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='76.189.242.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.51266Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5d7f22-b20f-4b8a-a00e-a98b92d5a6d2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='78.100.251.100']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.513712Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8830966e-d38a-4b7f-b3ff-c1a9f36679a6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.109.199.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.514951Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583ffe96-43bd-4072-b50a-ca8d3668c094", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.111.0.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.515988Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d461e9-5106-455d-ab37-4e983f8ccb82", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.251.216.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.517004Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44dbb90d-4d1f-41ee-93a4-ccc3db32393d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='81.91.233.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.518009Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a1191c-10af-4312-8132-2475fb700eee", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.209.67.238']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.519031Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40eee20a-4016-4c51-b8ff-68395e547f3e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='84.108.40.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.520206Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ab843e-3f3c-4d92-9c2a-02246e68a237", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='87.19.81.203']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.521231Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cb34ec-2909-4ebe-bf93-53a5572b1a55", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='87.117.239.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.522289Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30578c8d-73f6-4322-8627-1b9380d11d1b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='90.154.125.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.523338Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ce4fee-4c2b-4d00-91e2-a005715108d9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.193.183.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.524414Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce19eb7b-050b-46a4-8760-cd2880c8c4fa", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.239.237.161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.525476Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27357710-05e0-401c-abfa-03b54d972d4e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.241.100.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.526701Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb39b19-5120-4c7b-8d22-bc9e58e72db3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='94.107.168.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.527731Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633de719-d8fd-495d-9c2a-83bcc83b789f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='94.182.227.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.528796Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06aba0aa-2ea4-4f7c-a5ff-8e4a97c9431c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='95.174.197.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.529836Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4a9b73-afb6-4267-966b-8d411d3e68ef", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.31.38.132']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.530897Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2774a7-01b8-4144-980f-aa15d91cdc31", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.66.50.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.531917Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403e40ba-fbca-470a-8f23-412ab926e6f0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.94.108.86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.53299Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb03d94-35e6-480a-b968-a8eb122815e8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.110.84.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.534022Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f827d185-21b1-42d4-aba5-7cb904990a18", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.123.25.80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.535102Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c5d3a2-017e-43e3-8a03-044095813789", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.153.141.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.536167Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860df48a-5d7e-422f-a9e5-15e83a44afc7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.157.25.12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.537406Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a0ba22-6048-45b7-b62f-c6048d447f80", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.161.150.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.538465Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04be988-a30c-4272-b477-e6bdd6cca873", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.187.146.200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.539479Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8931af44-8476-44ed-b17d-e31db0db3dfd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.189.234.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.540532Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2727d379-4eb7-405f-8bbb-5ac97c1ab280", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.207.48.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.541541Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2c4b06-00f2-4572-9de3-ee347b09bb18", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.250.163.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.542641Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016055f7-7071-422e-bdbc-b3226c5c4c8a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.128.88.83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.543664Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81560e0b-39de-4976-beb5-9ed35eea4fc7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.221.242.131']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.544721Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6b3985-7b04-484b-a9a6-52935532c379", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.221.242.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.545777Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddebff24-4d01-4f99-b9f9-e57c93ced7b0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.51.72.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.546884Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123e53cb-1423-494a-a121-b3f0e34a6b26", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.51.76.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.547947Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f8a5e6-6cbd-41fa-81b9-f1de83fd8074", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='108.28.163.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.549176Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997ab94e-aeae-4e87-befd-720c3f427f6e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='109.115.114.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.550227Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7562533-13c7-47c5-8124-ce2795328645", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='110.93.245.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.551291Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a248c4b3-fe37-46fd-b72e-b25dfcbcd554", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='111.70.1.63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.552458Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571fc0cf-0ba2-4d36-908a-77d19caba607", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='111.250.12.139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.553498Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f7257c-41e5-4558-83a6-a766568014c7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.32.250.205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.554559Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a870428e-a66f-4398-a0e3-c8d269778287", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.35.7.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.555602Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b64562-4ef0-41c3-a64f-a8a53022420b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.35.41.56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.556649Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4a423e-6450-4784-a916-2e2523b4ca46", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.199.123.211']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.557702Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1a3eb1-4e50-4829-9d73-6b0b6b90647c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.112.240.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.558796Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265dcfad-7e74-4d17-b478-16bb5f274cc0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.166.18.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.560477Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf1b191-9331-4e38-b318-04cfdfc01afb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='119.206.36.97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.561521Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a97020-429e-4e4c-928e-b8315b3fbae8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.65.121.149']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.562601Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb6b7a1-0da7-4bf2-8edc-9d46e5f2da45", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.179.242.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.563628Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9d6b35-fd38-4aa5-89d4-6724576c2cd1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.188.108.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.564725Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0098e330-4282-4de0-b272-34e521193904", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.116.80.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.565751Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4fdf47-e203-4973-8d58-a76a47e59991", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.93.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.566808Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c31c8a0-d93e-4c45-9bd5-0bdab46d5171", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.179.135.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.567833Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6048477-bccc-4516-907e-355e4f9deb8e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='124.153.198.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.568967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c3577c-6739-4f84-94bf-d58920edbb47", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.228.198.247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.570005Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a6ed61-aaf1-4c7c-9f76-dcb2e40ffc2b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.133.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.571086Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26824a88-604f-4761-b2ea-fa4b5bc333bf", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.226.210.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.572393Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f611ffd8-3203-4ab2-bb09-39a883090faf", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='132.145.88.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.573438Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729209c2-af42-4f81-a820-77bcaa687b54", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.17.17.32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.574497Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540987ad-1b39-44dd-866b-caa9d247385e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.122.34.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.575536Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3424092-7957-4b5f-aaea-a8657525eca2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.209.211.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.576664Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ff091a-972b-40df-9df5-1aceae2f6b05", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.103.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.577689Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096ac05a-7efa-44fd-a127-9239540f0ccb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.113.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.578768Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e55962-65f7-4106-9158-9f10f4c03649", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.135.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.5798Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b64a520-d15e-46ae-a81e-7ad885b3daed", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.26.69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.58089Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913819b4-9ca5-4ccd-ad1e-3bf81d8d995d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='141.98.6.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.581909Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e23732-49fd-4e04-b3b1-cd1fa1cbfa6d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.110.182.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.583134Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a602d38e-09dc-4766-b28f-1a0332691592", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.110.209.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.584279Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d1fa6b-0acd-4ef7-8a37-628557a07294", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='144.34.239.101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.585353Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c960dbc-7559-41f5-8e9e-4216ed08c789", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='145.255.5.205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.586424Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5196eca7-a2d0-4a9c-9c37-aa08a8dcc921", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.52.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.587456Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d7300f-422e-4046-a2db-3f89ffe7061a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.125.196']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.588558Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32d6c17-ca00-4348-9882-7734aecefe63", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.168.122']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.589633Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427f47d9-17a1-4a26-834e-82276d6f276e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.182.170.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.590733Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19881dad-e6d1-4212-8ab5-d76b7b56d097", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='151.45.16.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.591769Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3338ff35-8bc6-4535-9a76-fd0d20ae471c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='152.70.113.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.592912Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b59760b-8802-4388-bd4f-6338625a0321", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='153.232.123.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.593991Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6d61d0-6beb-48ec-b835-a3376cd9f32a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.97.125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.59524Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222923d2-2ba2-4838-9402-0b929df3b505", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.19.27.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.596398Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014e8133-9fda-4838-8f4f-30d106377384", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.243.136.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.59744Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306652b6-0cb4-4a92-a5f8-0a80ed85a8ad", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='164.92.91.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.59849Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aaa53c1-c7ab-4b1b-9fe0-533ad714a5c4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='164.92.212.181']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.599501Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1160f5da-95b0-4792-af2b-7a621173a001", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.253.196']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.600642Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442edec9-dca6-4ca1-a321-ccaf15bb2706", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.227.64.86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.601667Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9d1905-6c96-44a9-92d2-857e04bd7a24", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.227.142.62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.602728Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d1d57c-1f52-42ea-9e19-93183ab4fc12", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.227.148.167']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.603784Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc955339-0e3e-4b73-b916-298695a60821", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.232.166.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.604925Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b1e7c6-cd6f-4055-ae45-dc8ae845d26b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.172.112.115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.606144Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636f330f-db6c-4598-98bc-4f70e7dae9f5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.172.138.86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.607223Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddab1a92-04ba-4e34-bf0d-9db6303bf2bc", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.106.180.217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.608373Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8e7ed8-40d6-47d7-b052-3a9fd4a14c39", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='172.105.239.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.609398Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04706461-545f-4d30-81a0-1035cc119eb0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='173.249.53.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.610469Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7489db88-cf04-4e8b-8a0c-e37d01f1653d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.39.82.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.611487Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acedc42-59ac-49c0-8d01-a6a0c5141608", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.91.249.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.612543Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529a52bd-0b10-4606-9507-59509163f101", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.124.222.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.613565Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d0bbd1-c33c-48e6-93e8-a7cb29a59320", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.128.73.254']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.614677Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46197c6d-3b6a-48cb-863c-9009d793f3da", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.128.229.120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.61573Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d79007-eb70-4a4a-9a8c-6c873cff60f9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.168.95.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.616803Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d182d6cc-2eb9-4f79-9365-9e1fb92ba220", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.218.212.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.618012Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99cc7b9-ac6f-434e-acd4-58f74d423c8b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.64.10.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.619073Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2565d49e-3e3b-47d9-b2e3-41cb90f627e2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.143.142.125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.620147Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae696c9-7b23-479a-86ba-14597ef5f8dd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='182.79.68.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.621188Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3bca2c-5a38-48c2-8b78-d280298c360b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.82.96.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.622236Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a336158-d8ab-4159-b211-260c5f03e571", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.146.30.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.623337Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc03ff7-cb03-4af8-8d1e-eda373bc6d27", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.74.5.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.624484Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfe6b45-457b-494a-acc7-793d3709ed3a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.182.105.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.625564Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a670ba47-b668-4b44-bb22-66b9a12dce56", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.191.204.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.626771Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa929eba-f612-4832-a84f-caa2f6022ee5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='186.212.31.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.628038Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d028e7-22e0-4d75-8306-6095e4499ca1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.44.225.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.629377Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb195d2-fb97-4c56-ada4-b26a116ef57d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.72.128.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.63053Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663ac0c2-586b-48e1-9a18-ec99802c285b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.189.8.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.631555Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13d11ad-99ea-4f2f-b35d-be23f63c1e6d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.189.37.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.632717Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4ea2b7-3450-48e5-910b-e744a2cae05e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.36.123.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.633797Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9a49dd-de97-4f16-bba2-f9b1eb659805", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.170.13.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.634871Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1558e96-a0e8-48eb-b5ae-074a494aa350", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.63.232.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.635903Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757b8c9a-4cdf-4fdd-a788-06cf4635a722", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.128.232.244']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.636963Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b74076-cb28-4611-89dc-d917f7af82f4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.16.206.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.637988Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e93219-cb0c-4767-ac65-d20b88c4c2fd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.17.91.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.639059Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cda10d-ac65-45d3-92a4-878c3fd4c739", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='191.101.157.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.640136Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33944d1-ec98-400e-ab30-6d05f84debfb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='192.95.7.146']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.641346Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798b6b1d-bc5f-4753-b92e-05de41f21caa", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='192.210.240.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.642401Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0889143f-7892-4f80-bb01-ec98ff6bafcd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='192.227.194.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.643436Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56e9342-78e6-4095-9f4e-4538fa040720", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='193.141.60.199']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.644528Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16663b8f-f536-443d-ad39-443f7e2b6225", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.110.203.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.64561Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a393d87b-9a00-49a1-b782-cfb6297a2be5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.233.83.129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.646704Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08314b2-5ae0-4058-be19-a22e2b01717a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.19.96.101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.647731Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5503182-6453-49ce-9762-7cc1e9bcb8c7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='196.188.104.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.648796Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3599a77-500c-401d-9b69-06af4d0c89b3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.11.141.86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.649858Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7f84b7-e7f5-45f4-859b-ad02dab98af8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.45.183.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.650937Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb038708-0408-4f8a-80d1-dccd7a18ddd3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.70.56.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.652165Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7361cf-7c9e-43c1-b9ce-acd9d05421a2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.73.137.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.653322Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589db212-d05a-4a14-8df3-f2b8bbc7dccf", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.73.138.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.654355Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc3764a-072c-46d2-8afe-b732ef333020", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.118.57.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.655372Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec02df3c-7eb4-4085-9427-20a774cd8332", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.121.230.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.656428Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63912239-8bae-4f82-a446-61a8d8933716", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='202.131.233.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.657444Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e100db9-9a50-48f5-80af-ea046bf54cf8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='202.215.133.1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.658534Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb4fdd7-9c66-4b11-bfd4-a54991b349d1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='203.59.73.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.659538Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9b6810-a82e-468c-b2d1-af478f605623", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='206.189.138.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.660623Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043aae59-f069-4795-9b5c-d53b4b2fcca4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='206.189.226.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.661644Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5033d630-d92e-4b49-ac55-c782d683d96c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='208.109.34.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.662779Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d521f4-9f47-438f-955b-0d2c58dc17e0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='209.97.183.120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.664052Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d580023-686b-44f6-ab92-4f956cb40b98", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='210.183.64.254']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.665098Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37e2f58-afce-4f34-b144-e2b997377c17", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.72.80.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.66612Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56144a21-39cd-4b86-8a7d-2dbf1d126fae", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.218.39.159']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.667175Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87e9762-32e9-446c-a309-836021a06991", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.25.208.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.668231Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4f45d4-7959-4c68-a21c-1ab21eb3cfd7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.60.104.1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.669251Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9439da-8af7-4016-8097-9e1749e80e7d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.92.0.207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.670265Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae7f555-6e34-43ff-a0be-1631b265f3ff", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.232.60.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.671333Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d08ff4c-821c-4577-9281-d4825ba4cf9c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='219.101.128.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.672377Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc01b399-4fec-4812-9dc7-73cf7de2dc68", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.89.239.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.67343Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbd225e-d98c-41bc-9a93-696d4ed5b8fb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.126.8.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.674659Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6d6084-73d1-4ba4-a24a-4247e4f8cb73", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.128.103.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.675679Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed37c024-ed75-4196-ae98-1fbefedbee88", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.21.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.676739Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee517a8-07c5-4152-9ce3-0f5464c40786", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.94.44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.677749Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91d0a5a-e265-4a51-afe6-f07a7aa902ca", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.55.62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.6788Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5f13f9-9e08-45d9-8591-d0e2e90f793d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.152.247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.679808Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4935a449-16f6-41fe-9ae2-4ab5765ba715", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.178.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.680881Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fbcc9c-f832-4009-b567-5dd0a071ca32", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.178.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.682226Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c746843-f5c1-4e3f-88d0-243113b16408", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.156.126.1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.683257Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3637e6e-39f7-4524-af9c-bad2988b7c50", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.161.235.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.684317Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad1b534-ea6d-44fa-bb0b-c45ed1db8405", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.241.94.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.685326Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682086de-34df-4756-a173-e4761e4c14bb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='18.170.86.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.686551Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75e0649-5b7c-4c29-8074-0be5ead1af0c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.148.10.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.687549Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d95718-dcbe-4d8d-8d5d-49bd8520ef4f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.170.242.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.688652Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc1ca2a-9f5f-4e08-98bd-689082326d5b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.68965Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db69de8e-1042-42ea-bceb-90bf5d3ddec3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.205.150.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.690687Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd3fa59-d1c0-49fb-9da9-ce3665f08439", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.210.31.184']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.691684Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e52660-c649-47e0-9bc3-be5c3c87eb6a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='216.218.206.93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.692738Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd099ae-745d-4ffa-8463-40587c93f7c2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='4.224.22.134']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.693734Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed24621-6e81-4250-a414-49a514723e11", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.97.93.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.694792Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c16836c-ec60-4224-9e68-4bc7651b7209", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='18.139.12.139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.695836Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1063a498-69b0-45ee-8473-9ebba1bd00fc", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='23.95.90.184']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.697542Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d472f5a-b0bd-4944-95d0-f9cb6248422b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='23.105.194.45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.698611Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8a0713-3652-4c56-a5ef-40b878008ea4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='36.92.248.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.699653Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8297404-961e-4f2c-9f8e-89cdc609667f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.32.6.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.700706Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e8e618-5578-4612-9722-be7e9b50cab1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='41.223.6.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.701716Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61b16d6-b28f-4a88-8b69-b40d6b2ae94d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.131.23.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.702754Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58d2c29-c83c-409a-b813-bbd1516f8691", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.131.31.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.703766Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca435565-3d73-4a63-9402-fa9692fe406e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.134.42.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.704809Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c79720e-6222-4aba-94f8-ad7371b61538", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.135.158.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.705818Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3915c5f1-8bc9-48c5-85ae-c12c968de94a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.65.72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.70689Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9e2de3-48df-45bf-a3f3-eb5356f919ed", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.207.222']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.707935Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3e70b4-54eb-44e2-9d6a-a03a4c47253a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.154.231.236']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.709167Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1443a4-c5ca-4255-8e52-0fb0bfdceaaa", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.156.41.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.710194Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414942ff-4173-4e7c-8054-39dc54be2079", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.156.97.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.711241Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12523249-cc85-4073-bcb9-48aede0440a6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.157.26.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.712312Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48585488-7ba5-424a-92bf-f5684fcf1e7c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.163.207.202']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.713335Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba9c9eb-e6fc-4555-a66e-e6ae84c73c74", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.118.145.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.714678Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b16b5c-920f-420b-83cf-0c46b4bed2b0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.120.69.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.715735Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3970a3c-368c-41ff-ae90-73dfaef21c76", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.127.88.139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.716828Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f033be6-7378-4f20-9f98-6fb71020fea0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.234.188.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.717862Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd81e1c7-896c-4478-8e2c-1400f9ff1025", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.236.244.153']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.718918Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9730515-9188-4fcd-b0ad-c9139e7a0264", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.245.66.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.72013Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293e8f39-dc88-4622-8456-e5c649745552", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='50.208.237.91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.721135Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863c9c96-1671-4aaa-9770-1471f086cbf8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.15.245.128']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.722144Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9490e809-9803-45f8-a65d-d74077b6f1a3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.79.204.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.7232Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fde4405-9bd0-4cc9-8043-6c0b688fbff1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.91.78.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.724303Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04109783-da2f-4f00-a166-fa7a1b2c0763", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.250.89.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.725293Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c6dab5-baed-4872-be46-1d261b101b0b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.3.76.218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.726365Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9c4473-a3a6-4de9-aa59-4a764be82752", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.13.161.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.727363Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fa56b2-b9d0-47c9-aa1e-58fec12e5067", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.125.11.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.728453Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477ea8bf-6cd4-46cc-b154-17e4cfc6ae8b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.72947Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2838f38-432c-4849-aca7-1bf9c7de89fd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.730535Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c417c570-fd1e-46b0-98e1-a53939f981a3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.73172Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c55bf62-9e2c-4122-8a57-168c7690f391", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.732785Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0607833b-78cf-4957-b702-4e88803a3063", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.733815Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75a27b1-9f4a-47f9-b4a6-8f67e209038c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.734878Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26213a0-9008-4b2f-ac3a-ac612e6fa90b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.735913Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d860a8ca-db88-40f2-9ace-dd03726290d9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.736958Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47ca504-12ba-4950-ba7f-47ee6e9d1169", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.737975Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98846c54-c739-466b-ab22-1feefcc3048c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.73903Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92488dab-0af6-48e1-8d17-387e3e1eb336", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.74013Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be20e545-d115-4beb-b4de-5136c3c9f772", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.741151Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a82c57-84ca-43e9-a742-1df780f0937b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.742442Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917d825f-6b2a-477d-9288-d11c8202fe9a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.743453Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1879efa3-efdc-499c-885f-c7967ed7fccb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.744534Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adea38ed-9e12-4d64-8c9a-8f47b84d5fc1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.745538Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18eaceb-b10b-4f1e-a25d-a44c7a14460c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.746596Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf829b1-ea24-4abf-b8cc-3b36fdbb44e1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.747624Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86ecfec-3d87-4c7d-b419-d5eabce5e52f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.110.3.205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.748706Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7d6af6-9402-451a-86ff-6af8a5019743", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='64.227.46.127']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.749729Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f95ea1-9212-460d-b62b-50e62dd03b29", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='67.244.66.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.750797Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492d58b4-8819-4a0d-b60a-e8243c38968b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='68.183.20.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.751822Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c578c5cd-64ab-4a3a-9ea9-281b0c9fca08", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.167.55.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.752936Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6147df34-50bb-4b47-81ae-40620dc1b39b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.12.118.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.754123Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3058ef-ec23-4494-8bbf-5f0ffb70add5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.188.52.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.755179Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff834820-f729-475f-97de-ce62b2b1bad0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.91.183.93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.756362Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca15e47-06a1-4236-a426-965a8ba222aa", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='81.161.229.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.757388Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983053dc-5699-4a2b-8957-09488da7f522", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.111.224.129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.758498Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2584962-0f56-45a2-b577-a23370935465", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='84.42.28.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.759562Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb975d7-1f07-449c-a21c-cd24bc0db689", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='85.172.107.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.760621Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f39c08-c61c-4052-8d19-8cee953e5ff4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='85.192.41.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.761645Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689554e3-0cae-4fdb-9d46-ae7b4444c623", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='86.163.183.125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.762722Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61e4b23-14b8-45c0-8ad6-c330d358d09b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='87.117.239.224']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.763758Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec9d4c7-a110-4dd4-9723-1851dae2f72d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='87.219.167.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.765003Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577f9360-e24a-4b5f-a480-fafe2e8af4af", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='88.98.246.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.766016Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be9c54e-4ba2-4efa-8708-7e71b6c42d27", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='89.179.126.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.767043Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb23e564-f13f-4d03-8d79-0920b8199ff2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.93.63.187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.768094Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba9854c-9db6-4129-9220-872c0f14d90c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.107.170.118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.769117Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bea04aa-2afc-4ad9-8e6a-660a5da9c596", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.50.249.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.770123Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108473a9-a667-4eda-a2af-70dc1cf78661", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.224.46.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.771168Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4654d0f4-8c6f-4aa7-920c-50deb6c36b81", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='97.74.82.38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.772291Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d7e2a2-1a78-4725-a05c-e27017540995", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='98.151.16.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.773305Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c597bd-8f57-47b2-9cb0-5ceee68e8f3d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.38.4.238']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.774383Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375ff87b-438d-449f-aa76-5bad9be901a7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.99.149.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.775402Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1efbe15-4a4c-43d8-846e-8e5b87347aee", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.139.170.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.776656Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb662d3b-aded-4ee7-8a88-30d61d842566", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.176.78.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.777693Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25861cde-7041-49af-8314-7fe8614cd0e1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.183.74.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.778761Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf7080d-47ec-467e-bbb6-dbb1b1f24c16", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.221.245.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.779811Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de706c59-fbf9-44f8-98ac-c8f3f889c9ae", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.248.1.96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.780881Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9df385e-d3a7-422b-9fc0-c22bcbc618a5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.75.233.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.781932Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b617deaf-1837-45aa-8a71-f93ea527c80a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.151.203.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.782974Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633af320-1e14-4d6f-af8c-cc131dd47447", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='109.164.205.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.784004Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631bbe75-2259-474c-84aa-342cf18e9413", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.137.132.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.785036Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8644f10-f5f8-4150-b9fe-511170ca6d95", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.167.247.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.786053Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f7fcca-ea8e-4ec6-a2ac-6935c337fc92", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.172.162.85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.787259Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30446a38-b054-4336-a21d-1308022011f4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.196.222.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.788343Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de575f6-b714-4223-b7bd-e043f9f64241", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.217.164.107']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.789341Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4310a7-2de5-485a-b325-c9c993de75a7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='113.203.237.139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.790374Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0119800d-34ea-4fd3-9f86-bf0f23ef3e32", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='115.113.11.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.791426Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179fc89f-9af8-4849-a41f-c10045d3d47d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='117.158.163.235']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.792522Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9959ed15-965f-4651-a90d-cc126f8e4c11", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='119.65.149.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.793574Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae424ad0-5b2c-4bba-86a4-f3891fa4b4de", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.63.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.79465Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d454eece-a393-4926-99ed-c865cf79478c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.91.252']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.795689Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5413a981-5c51-4f02-9dd0-12d0a9d61510", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.120.146']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.796773Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab71a8f-12f2-401a-b9f1-2dd3c036e78c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.162.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.797833Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282ea588-4ae0-4707-9bbe-b8d750fa1102", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.186.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.799052Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0af5ce-5de0-4cde-8efa-dbfc4273dd02", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.208.187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.80013Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4ba30f-b62b-4a89-bb06-e477352b3b5c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.205.208.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.801141Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca054059-eb13-4b81-aef7-46229e999760", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.96.200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.802157Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d89ad7-dc53-42d8-9773-4ad076b35280", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.103.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.803219Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9bc132-d455-4b6b-98c0-c5557008be5a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='138.128.240.75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.804353Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4611d437-1b66-4e99-93f1-ab1cc30d60e6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.14.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.805364Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97263a70-ef71-4b10-831b-b0af58d39f91", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.92.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.806449Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b903b0-ad59-432f-850d-131598e8a7d5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='140.238.122.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.807477Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba54fa1-6a23-4585-b71d-a068fe94854f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='141.94.106.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.80857Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943414d4-37cf-414a-b4e4-96955d9eca78", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='142.44.247.187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.809788Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b6dc3a-010d-4abd-a51a-fb802ac0209c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='144.22.185.115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.810868Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebbf3c6-d390-4c90-a44c-a5a47ba3a5d0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.82.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.811899Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664369c0-a8ac-4a35-9d9e-8d07d20c33b3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.127.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.812958Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44cdd61-0ee2-4e45-bc25-363453f44790", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.228.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.813998Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7724b83a-388e-45b3-9778-75c8d675d4ad", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='150.117.210.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.815049Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2837f53-2d28-4172-a2f5-4958a0d2827c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.230.53.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.816101Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a1ab48-5fca-479d-9da0-997ea7c0edbb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.135.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.817121Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efff057-4ba3-4354-a303-188e08d16eeb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.212.152.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.818138Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a64d6d-52c9-41b2-af16-e989397ba7e5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='164.92.94.151']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.819236Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c921f5-857a-4f68-999d-7f1a7de34ad2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='164.92.154.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.82043Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dbb373-ce50-41e0-8bb1-d1b5f35ded0b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='164.92.161.202']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.821643Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eeaee4c-b006-4fa5-bb52-1893d0635a12", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.22.223.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.822759Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841b528a-f693-4963-9fc7-1b2650fad86b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.229.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.8238Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2ffefc-3db6-4498-81c3-e77b3b7c32b1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.236.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.82488Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c33f588-cd13-4d26-85d9-560cc952a662", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.227.234.161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.825908Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e7921a-1948-41d0-9db3-5960f96e0e66", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.99.200.203']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.826968Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d241bdd-3102-4989-a428-ed7a5bb32541", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.106.115.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.828074Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939c947f-fbd5-425e-843f-64e1663be208", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='173.185.187.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.829108Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55569c22-4f00-4eb5-a2d3-cd19f039e332", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.213.176.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.830123Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ca7a16-8226-4e50-b7ba-7a6b7b1599ff", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.111.173.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.831199Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad8ef5f-4d52-4566-98e3-6c3024bb9a89", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='176.124.206.96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.832925Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04e4358-169c-4b35-95c9-31b3b37d2d32", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.249.45.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.833971Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac04bdf7-01d9-445e-b804-77349c3dd757", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.88.161.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.835034Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc627ad1-8674-4fc5-b6a4-cb09399f6115", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.128.5.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.836152Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aeebc76-35d4-439d-8d43-ab65f9455f34", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.141.249.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.837171Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579709bb-574a-452f-9d6a-2218fa62dd7e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.96.107.199']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.838185Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ce15ca-6d27-487f-a4fc-c7972101cce4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.110.72.195']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.839231Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd08106-1ee7-428f-b370-6c62bc49188b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.92.49.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.840279Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8be9eb-61bb-4425-8196-1bd4c5ab2c88", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.4.25.33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.8413Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea23ca33-9520-48d0-a0b9-b8046567db5b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.40.79.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.842353Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd59c1a-a9cd-44a8-97ed-5cb26ec7402b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.63.245.125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.843413Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515cfa6d-7124-437f-af57-b1d2a026a82c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='182.93.94.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.844732Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f420326-dfac-4f2e-aec2-f68917a8e14d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.100.212.116']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.845763Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25cef7d-84e9-4bf1-98d7-db532ac4a6e7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.127.18.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.84683Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d34223-0d5b-4e79-8fd6-3fd5b8b277b1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.209.228.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.847854Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60192bc9-b037-4641-acc9-43bb434483b2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='186.67.248.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.848932Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d38b9a9-30ae-4671-bdca-13e658049234", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='186.123.164.12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.849957Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b9b479-5b21-43fd-ad5b-854cb8f65b69", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.191.60.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.851031Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f24c546-384e-49bb-9889-d8bc9751201f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.166.30.235']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.852105Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1b2199-01de-4deb-b834-7643ce105626", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.166.173.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.853144Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe156398-4e3d-4d26-b181-77d7fe46a053", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.166.208.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.85417Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35218e0b-83d2-4a92-ac3a-65933137f109", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.166.225.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.855435Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4383d31-1799-4e6d-8f88-3932201c707f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.112.196.1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.856525Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070d2edc-eca9-4aaa-b03c-dff28182bf0c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.104.2.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.857545Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38d256d-ecb5-4dad-a219-89caf6f6477e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.144.14.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.858621Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b8990d-aedc-49b5-848c-c405afe5d511", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='191.98.191.69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.859659Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9916f3c7-0ff1-4914-9fb3-46860f09e878", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.110.203.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.860776Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5deb9c4b-6029-4ab5-8df7-76cb56e22574", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.3.147.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.861835Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a684c1-d883-4465-a9df-3bf4997d9bd2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='197.5.145.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.862892Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585b0ecc-80ba-4c51-98dd-912e49f8f9cb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='197.199.224.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.863945Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a1fc0d-ee3a-407b-b56b-b5c4ae9af7ba", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='197.248.2.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.865065Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360a0420-e228-4c67-a65e-a2065400bd27", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.94.86.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.866083Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0309c2-87f2-417d-a2ac-15fbd5dfd764", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.105.19.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.867292Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc76d12-6e95-4f74-a109-ccbee079c322", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='206.217.131.233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.868409Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ad4bb6-26ff-412b-89c8-dc103352b261", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='207.154.205.34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.869441Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b0e225-5f44-4137-acd7-5bbabbbb7ee8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='210.97.31.217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.870519Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7743a8-1d0a-49c0-8fe3-388242dd8ff2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='210.211.116.80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.87155Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfc85d7-989b-40ce-ad3c-92ba32ef1e87", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.225.18.232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.872628Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86751b7-a990-45c4-90f9-2d24ad50abb9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='218.35.202.57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.873674Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6614ca4e-edf2-470e-a520-9e87f8e36f30", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.119.240.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.87479Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22abb29a-6e43-4131-af80-e53afbae89cc", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.40.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.87583Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab99df4-78fb-45fb-8335-3ddf9f595302", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.127.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.876979Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b731ae8-2ef1-4aea-b87c-ad9292a4fc3c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.133.23.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.878181Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4255541-af10-4fa6-82e9-e58ccaab2fba", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.133.144.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.879228Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d892881-a2b3-4d02-aa11-913400ec1b10", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.175.40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.880296Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8450c5a2-8dbc-4502-bc58-282bcde9fd24", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.135.36.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.881299Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d223035-796d-45c8-b67f-6e146a513478", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.116.73.78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.88239Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41731bfb-d543-423c-bb9b-f3724e1ef811", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.120.45.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.883397Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89d59f0-7a06-4c02-bac7-d79ca82514d0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.148.10.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.884458Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28591c47-77de-4e27-96a8-3a3b6b87b4bd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.82.77.33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.88548Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feca2267-f55d-4de1-b7f5-0459700f75a0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.152.52.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.886544Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee38feb-927a-42cb-8703-17d5e39ca3c9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.887615Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8efc208-bb39-4caa-a407-498f061fe29a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.248.133.132']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.888672Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4148653c-38a8-47f5-b109-bbbb0b2e8f97", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='192.241.233.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.889928Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9f872b-b58a-41fc-9586-01ea9b2f0ae6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.210.31.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.890992Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a47dc0-32b4-405d-a79f-d9fa1327cd67", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='216.218.206.89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.892086Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77530660-c7f8-4818-94bc-79cb83a5ac76", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='1.162.31.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.893112Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a02dd8d-8ca0-47b9-b538-651d53d09baf", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='2.44.161.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.894124Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe29e47-21c1-470f-8dad-476ec4dd4c9e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='5.161.117.247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.895166Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41200641-73a3-458c-b8e4-eaa6be1b985f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='5.161.188.151']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.896211Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4b4b7b-df18-4005-837d-c6959d1a71a7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='5.199.130.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.89722Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce3aa20-debf-4236-b906-5fa298582577", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='13.77.174.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.89823Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8ebe7b-86b9-46c7-a890-0a22983e1c4e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.34.42.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.899317Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81f522c-e5b3-4574-8a1e-baa35cecd234", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.161.27.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.900555Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afcfb81-af5d-4b3a-ab86-6e2cceae541c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.108.240.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.901581Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee5e391-4ace-4e8a-af1d-4c90fa17a272", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.231.71.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.902632Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b5d8f5-267f-431e-ae3e-9cc5c6651c7a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='27.147.145.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.903707Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42cf4bf-0b61-4741-ba70-9d41f6057a8d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='27.254.192.185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.904767Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eccc5e4-87dd-4e59-8ba3-fde6d8473b9a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='31.165.41.196']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.905817Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60d97e2-1219-42e3-898d-453a9d6c163e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='34.93.21.236']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.906865Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7744f25-a9b0-41d0-aba9-f7693e448d26", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='35.199.97.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.907883Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c3c0a3-8579-464b-9c1e-ead0fd9991f0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='35.200.141.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.90895Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6807215e-bb26-49a4-ba06-2d1cd63cbc03", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='36.95.71.217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.909967Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe35026-918c-45d3-9f19-f5db7b1a61a4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.49.38.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.911036Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efab6ce-bf44-484c-af48-8a4df13b9b2e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.139.4.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.912261Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca23ac09-16bf-47b7-9bcf-9a6ce7bb173e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.247.99.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.913289Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2d3f47-d044-4294-ac21-a27e14e81ca4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='40.118.30.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.914351Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9113c01-fd60-42ad-aae5-2b7e693ed525", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='42.200.78.78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.915367Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48d063d-5f8e-4a34-ac72-97148cfb6d69", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.135.154.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.916429Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc05ce4-86ae-4c6d-b4b3-4296e487c588", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.138.17.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.917474Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d062bf32-b013-445b-9ae4-1039c014120b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.43.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.918563Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe84e679-aab5-4fde-9c42-a2fae71eaa9c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.43.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.919589Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afc1f98-1cdc-4fb9-a1a4-4a5d58ba05be", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.156.18.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.920702Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02557b61-d2fb-4e39-a740-f953b049d233", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.7.138.40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.921788Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52062f40-0a8f-4db5-b8d6-fe5ba52688c5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.79.248.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.922991Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccce424-f8e5-4717-a322-cd0ef22489b9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.29.163.146']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.924057Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebd5c6a-1116-4846-8c55-768efbdd182d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='47.157.239.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.92507Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcd667b-1cba-4929-a0de-ca3b1625dc97", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.213.188.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.926078Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e292364e-8873-4545-a62e-9e34ee52274b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.247.213.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.927109Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139ee274-07f8-4fdc-ac9c-1111330eb20d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.38.237.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.928218Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dab6662-3f63-4786-aacb-2e4933d0fee0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.91.254.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.92923Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364c4504-891e-4b56-b690-fa5137ed2b82", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.142.182.209']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.93031Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98849a6-11e0-4a8d-b1a9-3b535227019c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.143.96.123']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.931365Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9590cf7f-471e-4722-b50a-848d43798867", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='52.160.46.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.932442Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae931e37-ba8e-4589-9645-73de2fd61dd2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.109.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.933479Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5fcec9-3d1a-4eff-9695-301ad77903f2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.164.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.934718Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1419aa2-c449-4d64-9669-8d9324d5c17b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.76.240.111']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.935749Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d3baab-ed67-48f0-962c-4818c4b3a093", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.936812Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b982cb3-3166-4734-bdab-a78ef04272ff", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.937838Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f949708-016f-431d-8cbd-0cef85ea0e40", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.938899Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881a19e3-508d-4976-a963-32e053d79f86", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.939927Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a6bca5-3447-46c9-a4ac-47c49ed19029", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.940973Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8397209c-d815-4cae-831d-92ab78a040d8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.942008Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b469c671-26d4-4d36-9589-6c4f756b8601", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.943068Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93890a00-d04f-4205-add4-74e08738b19b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.944197Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acf080b-5658-41e9-9bfe-aa680e3b7d2c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.945377Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36364144-fcd5-4439-ae86-8d6130424247", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.946432Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159ee13e-8a06-40cd-8b43-29a0a6711994", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.947434Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee5158b-a3a2-4bb6-a4a7-7d84b464e1b0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.948512Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021ebcdf-d82c-4e61-b8d3-cf73d0dfb49d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.949535Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2103b50c-46e8-40d6-9a04-16aa00b61535", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.950593Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21207801-6a5c-4ead-a56e-6c4f85bf1362", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.951612Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674f64ac-ea92-438e-bf15-e61935cdfbe8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.952658Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668931b6-e1f4-48be-8073-ecd24cf3f32f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.953699Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1fc2fe-10ec-4355-a737-69ac3bf315ca", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.954789Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baed24f9-4473-4ce4-b1ad-6f37e8996cd1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.955849Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cc97c3-9945-4027-a309-4e994386a441", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.220.207.72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.957098Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84ba46b-6dc5-4501-9377-bc1b620e584b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.227.247.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.958116Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2712818-a2ca-45a1-bc28-b650a9b8100e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.113.105.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.959156Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b7db5c-70e1-4028-ade7-934ec7811350", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='65.21.183.151']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.960203Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ed1717-7a08-48a9-817f-d6d338bd7d0d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.70.185.146']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.961206Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea2c66e-7353-44a3-9db6-e2179d9d135a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='67.164.27.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.962204Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771952a1-a7f7-4152-8f9e-e32f0e1ab205", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='69.55.54.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.963228Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72f5620-e0a7-476e-b54b-fb6ef1beaffd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.216.24.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.96431Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a6a0ce-8306-4768-b935-76fad719db2a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='77.82.90.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.965365Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1722e052-f663-4fa9-a62e-e649d70207b1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='78.38.80.246']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.966421Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9133b204-b00b-4bd4-8518-f7efa7fef908", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='78.195.6.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.968061Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02fc196-6a67-4bec-8df8-7da67b695e44", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.10.178.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.969084Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9387db1f-85e4-4d67-854f-ad13fb8e74ad", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.68.7.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.970102Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30f9b35-bc15-4b2e-ad4a-386825cff193", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='81.161.229.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.971142Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43648bc-ff4c-41e7-9eff-c44e2c0e9808", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.65.239.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.972192Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75eda55-6c11-4df0-8774-1e0bf6bfda01", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='84.88.59.1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.973213Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7989761b-578b-4aee-a7cf-5f5dca6751f6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='85.172.189.189']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.974214Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff32625b-eaa6-405d-b6d3-9ca84480a365", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='95.0.15.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.97526Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65aa31c7-d86d-425a-ad1b-9440f063b119", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='95.208.108.40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.976376Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b43b47-5a7d-4317-953e-b464256f67ec", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='98.248.92.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.977401Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582bbe69-6b6d-4c8a-a910-8e51eaf5d091", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='101.32.31.213']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.978453Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a733825-d3c6-42de-8aeb-86109d816967", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.17.48.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.979656Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3196f021-f328-451c-9518-ba7f2d4d0db1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.37.80.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.980707Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36f1641-51f1-4472-a2b5-3b2c97db269d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.82.100.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.981759Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ebe97b-9322-4fd3-9590-057bd16cb213", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.146.140.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.982847Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40cbc7f5-6a99-44bb-8b1f-165f1fe845c4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.146.158.171']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.983877Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e987e7f8-a018-44d2-98e7-6f6d4dee4b0e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.148.84.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.98494Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c051dc87-51d1-4478-8b5d-cc8ad9637710", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.153.141.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.985955Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad0e30f-bc4d-4123-a052-783de6eee10c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.180.166.60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.987004Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b078b7-9563-417e-8834-294db596315f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.128.88.83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.988071Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4e49c8-ed29-420e-aa1a-a7bc9d110fad", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.131.13.185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.989104Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e75e749-c8a7-41b7-bbe7-3635dbb0b3c2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.131.249.57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.990316Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f3dc63-319e-4e21-a00b-ab4bff3832fd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.248.20.85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.991575Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0dddd6-d795-4172-9295-248fb75b447f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.251.154.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.99271Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c872b7-4a00-42fe-bb15-9cfbde5e7684", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.174.172.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.993732Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70fc18a-8aca-4d68-b4d0-7fe0e0c93869", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.189.8.217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.994796Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b69ae3-8ed7-4082-ba60-51528eff0368", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.161.152.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.995822Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a40352-bb16-4693-9fbf-f57aa28e6941", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.166.144.105']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.996922Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bba883f-6f7f-4d62-96ce-68176fde7798", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.167.193.205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.99795Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e842fe10-b009-454d-af2f-fd910636abc6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.184.240.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:14.999005Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bebcf38-f236-4ce2-86a8-61f9265f0dc2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='112.221.11.181']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.000093Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cf9baf-2d0f-4651-bb63-b400604a31d6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='113.161.37.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.001164Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629427ee-ca5e-46c4-a5ba-30e6ac9c2826", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.33.75.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.002436Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1612ac-3d84-4ebc-9c3d-c6ab0eb8d3a8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.241.199.128']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.003478Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c3a8a6-fbd3-48ba-a0ee-e13c56c841af", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='115.178.76.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.00457Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c2b43c-63ce-47ab-97dd-0d9db578c723", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='117.102.69.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.005613Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd75b09-e5f2-4ba4-b7df-c72f89118ee2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.69.71.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.0067Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c364b659-13de-4981-8460-0c58e0135263", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.58.233.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.007723Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004c59a4-a703-416c-8ea7-97d053216d31", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.161.214.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.008801Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29770b13-d7f3-4119-b84e-2b17789c38c5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.18.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.009839Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a159fb7-0bdc-4549-a93d-fa6163e2de8e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.242.115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.010947Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ceb54e-5ee3-484f-a0a1-a0b78e0f9278", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.179.8.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.012008Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a40c007-8fbc-431d-a398-a0e2ad918b2b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.99.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.013252Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffe45ea-fe92-4a9c-b932-165dba9cc059", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='132.148.75.24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.014315Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7df54ed-06c7-4ac3-912c-ad3392dfbe10", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='134.209.127.189']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.015343Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3f8b2c-6c97-4951-9598-9e703a0dc3f3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='137.184.0.239']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.016503Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a91762e-0119-442e-b21a-4c661add24f7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.255.245.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.017528Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1bcdb1-3aee-48f6-a5ad-50e96965aead", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='140.207.232.13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.018588Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4ad301-0e87-4e59-87bf-e312e2d525e0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='141.94.17.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.019642Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac27e22-09a4-4119-9225-a3fb122e7171", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='142.93.14.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.02075Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f467f19a-63ea-41aa-be3d-b0bf92ceb44a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.110.168.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.021815Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b01059-83b4-4a70-8aba-32be735caf48", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.198.229.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.022902Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199f405e-b78a-4b75-a784-6f965a4df04f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.52.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.023952Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb7d732-56a5-4125-8938-e3a31c41f327", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.127.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.025189Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bda2df-4f72-4831-816d-7d4c54b1e6fa", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.182.216.228']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.026229Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31dda1b-25c9-4500-922e-5d01b7087f37", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.182.245.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.027309Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7493c7a0-ba04-4703-a5e0-a6f68afe7ed6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='149.202.74.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.028368Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbca0bd-6680-47b4-9c5a-85a852e99047", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='151.0.165.235']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.029408Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec854909-ea4f-46cf-a43a-713e233ac574", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='152.32.218.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.030467Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc93637-88f9-4603-83e1-d2755bae1d4d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='154.7.10.247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.031486Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5a45ba-71f5-4f34-93f9-5b2c27aa070a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='156.251.130.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.032539Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196f34d6-05e0-4f97-b535-63cf6749c80a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.7.201.254']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.033577Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa425cc-1a37-4635-85e9-e42aa93d7f46", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.119.79.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.034655Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac0fec9-418b-4d87-95a0-0027fee2e835", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.230.250.80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.035852Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bed917d-9c8e-4fc8-ad0c-9b2fd15d09f0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.63.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.037086Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22182eb-6841-4385-9847-88b14a33cde0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.65.103.250']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.038095Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b74a06-e5de-4aae-910d-9ad249e0c349", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.89.207.13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.039123Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4f235a-b6bf-4e05-b8a4-1d59a9c97e84", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.203.105.247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.040198Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c26bdce-c97b-45bb-8714-9e4890d9ba98", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.203.179.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.041207Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f437fe-4160-43c6-befe-cbe546590e2f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.41.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.042265Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9100bc82-bb97-40e9-8857-fc9de5be00d7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.35.90.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.043318Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02483af8-20fb-4849-ad51-b818e5f8efce", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.35.177.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.04446Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c83871e-1de7-450a-8b46-b7eb8ca91f53", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.203.253.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.04552Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3b9430-8ae4-4aaf-8015-fb67272ca20c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.22.60.53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.046621Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36981ca-339a-4dde-aadd-2deb760cf8f4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.233.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.047826Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe894bea-91a6-4c05-a46c-6a42c1fa2c01", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.232.76.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.048894Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba71f987-9e30-4234-824c-9fee241d2739", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.71.136.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.049948Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee60e19-f322-494e-868a-e646a2ff7155", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.71.217.128']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.051014Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97020445-c687-432d-8c58-fa4d8f52e2e9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.210.83.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.052163Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e12684-617b-4b8d-999f-b1e1cae02cf1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='171.244.61.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.053197Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0e3486-7df4-4999-8583-189fb0443a08", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='172.104.68.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.054219Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143942e3-f035-44ad-a287-82c8afc7196e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='172.104.96.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.055242Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c22f6ea-b57e-4201-836d-6c252d8785ab", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.204.208.193']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.056396Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8f085f-ce35-4d2c-a7f8-462b5fc8b65c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.200.212.34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.057531Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4e8dc0-60c8-43e8-9815-bd82d786571e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.128.5.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.058762Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02221c75-87d3-417d-8e76-73bf957ca03d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.128.223.193']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.059758Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a330a14-ba10-4998-8a9d-53f833c879c2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.154.203.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.060902Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51123dac-d298-46cf-bfd5-4577201290f2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.154.230.63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.0619Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d3d1e7-2017-49a1-9826-216103e96074", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.187.224.187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.06294Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e9fb28-9d3b-41d2-9b68-747a7efcb562", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.1.81.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.064096Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c1456f-c391-4974-88fe-beda363a3fbb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.246.251.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.065108Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb8c5a9-4667-4a4f-89f1-77cc69b14958", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.30.28.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.066131Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4c2cef-a449-47fb-8e60-ff353f7c27cc", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.64.10.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.067179Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21359fb1-b3be-4948-b51c-84dbf0b30665", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='182.16.179.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.068309Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fad64b1-8d15-490f-bb4f-47e574501cd4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='182.23.111.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.069339Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c93d35-40b9-4dbd-82e8-2b91895a2c18", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='183.171.204.115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.070552Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f253e379-c2f9-49a7-bc05-66318cf63d50", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.36.81.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.071586Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5730c0d9-0baf-46d4-9975-2da9e42e3e26", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.189.8.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.07261Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1749699d-ee18-4024-a848-55169cb8b959", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.244.141.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.073613Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4472f668-fb4a-4047-9859-1bd3841d5993", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.16.20.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.074653Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7510c75f-0696-48c5-96ac-d8c28bbcfa78", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.144.79.158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.075639Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475d4624-c18d-4788-9e34-3b4cf7c3c0bb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.191.8.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.07666Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adfad94-83c0-4526-bd20-bd9d3d7b18ec", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='193.19.96.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.077701Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f592421-05d7-4319-a31e-c5833088435d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.133.20.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.07878Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b9c85e-7a37-421a-89d1-faa4ca0ccbf8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.211.108.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.079786Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2164d09-6ef6-4f49-a8b3-b86743ec2a31", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='197.5.145.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.08103Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c70ce28-2ba4-4eb2-9271-8e11c13f72e8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='201.4.229.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.082061Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946badef-19ff-42f9-b6f9-12fdb88ca074", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='201.184.50.251']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.08309Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c24a17-558f-4099-a8e8-a3289791c336", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='203.170.190.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.084116Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a55f08-fe25-4855-b711-22ef098988f3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.185.113.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.085119Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6893d3-769d-44d5-b537-d08e6a6b98f1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.185.121.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.086213Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084e710d-8a96-47c3-9d0b-678ffbfe47e5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='206.189.198.237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.087233Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d900b0-4f68-408f-8708-b1cd737fd32a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.110.66.232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.088284Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f74e1ee-feac-4f67-b2c7-ab6d5d8864ed", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='212.83.144.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.089373Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab2c37d-216a-474a-863d-c0d5e41503af", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='212.240.35.234']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.090457Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4d0a83-69d1-45ea-b223-b789eb1a0497", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='217.182.69.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.091478Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688b4b5b-2f14-4472-9ed2-6cd71270c7f6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.86.29.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.092686Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1977099-fa18-4eb0-9134-25919600cf83", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.117.232.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.093713Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc0b540-8f98-4b94-8b73-849116aa6059", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.120.48.118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.094755Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2eec95-9b05-4b15-9a3e-e66a3b25b766", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.133.96.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.095764Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf24c06-5a3b-4873-8282-b8a8f52e4782", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.84.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.096825Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a46e1b-ab72-44d8-ac18-cc4d3a3ee89e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.135.0.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.097854Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f37e217-7799-4264-a407-fdcfb2e33f14", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.103.20.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.098898Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6384e7cd-ad6f-41a4-ab33-56ff0ee09922", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.105.220.185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.099911Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b513bea2-2819-4335-a5de-1bf05cf5c4d6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='222.124.214.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.100959Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671be619-f86d-42fd-bc95-2dbf8a42c54a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.61.219.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.101975Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcdc78e-4aca-4b27-86c4-4f987d1f5ed6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.103579Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46352134-b393-43e7-89fc-a064f0a338af", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.104621Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb0e5cb-7369-4e3a-8664-9050b62fc501", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.105618Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577fea4b-8671-42fd-bda0-3f119bcc38f9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.106653Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23aebbe1-9d64-483c-a1f3-b9dd6b08a807", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.107654Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a805c2c-bb60-40c3-ac55-67fa162a9c6a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.134.144.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.108756Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426aa9eb-4371-4063-ac1c-f04a3ca95ce5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.210.101.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.10975Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10e9c71-1257-4f7d-afc9-94a5533885dc", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.36.234.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.110823Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9272a418-3eb8-40d8-9f57-3ef4ecac457a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.251.235.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.11182Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1db8883-024b-4fd2-aa40-b7733b1a9c76", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.118.63.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.112844Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ea3b62-56f1-4321-8f43-78481ff47443", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='135.125.108.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.113917Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658990b2-ca7f-42d6-b7b8-d84443e42446", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='144.126.131.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.115345Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84fe6c2-2baf-4f00-a698-8dc4c7b94e4a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.11642Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac034aa4-079f-4e37-a371-d2e0c166b1c5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='163.172.116.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.117741Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487b62bf-4c75-4d93-8117-5074aebd76ae", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.187.164.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.119446Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777ab91f-f004-414c-9b7e-15882d94d199", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.154.40.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.121115Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fc8570-2bd8-4fd3-b092-c8b0ed2b7121", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='212.83.146.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.122102Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378c918a-b6fc-4ee5-b021-bdf2bc52bf4d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='212.83.172.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.123116Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6818f74-c8de-4f12-8979-3e632dc98992", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='107.170.224.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.124187Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330cb1f7-4436-48fd-b88e-5b4a39b19326", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.125271Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebd0d91-c135-4e24-9752-07271fccfec6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.142.125.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.126286Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a4449b-139a-43d0-baba-5108efa4aac8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.94.138.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.12748Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07e8ec1-4991-4478-bd65-49cc550a0dfb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.94.138.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.128602Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d818afe-d13a-4fe9-8e8c-9eea254cbc4d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.210.31.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.129644Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a9d3af-94ee-45be-b996-103f15b8f78b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "snmp brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='216.218.206.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.130685Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29e170a-43fc-45c1-ac01-9c1144b1e6f6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='5.78.62.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.131686Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94c38f3-a0ed-47c3-8c0f-addabb92754c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='5.195.238.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.132716Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d58bb6f-68fe-4ac2-bed3-f68eb4202baa", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='5.255.107.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.133757Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9c7850-1e8c-4ea6-9401-86650f354147", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.47.67.181']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.134797Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0d860a-caf8-4005-b210-f10b3d148b9c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='14.63.203.207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.135796Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065ef250-b172-4bb8-aba9-df0bd8db684b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='18.222.30.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.13687Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99df6751-7f2f-43a2-89e8-80562573aef7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.87.21.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.137877Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d751862b-0714-4f04-93a8-bcaa9e2cfd60", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.104.146.255']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.139113Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2923cf8-1308-4f52-bf4b-9e3e52359112", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.121.113.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.140172Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194e8fc6-67cf-4923-ae02-c65a094ecbba", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='20.236.62.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.141197Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d25c44c-43fd-41ba-a501-a14afd001a3e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='24.116.119.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.142224Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b2d450-b5a6-44d8-86a1-410c3dd18b24", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='27.254.163.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.143253Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94adbc3f-fef7-49ee-9c79-5b810c8069c9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='34.83.141.217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.144308Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b56d644-ce00-4311-82a3-5559d8dc64b2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='34.126.78.62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.145369Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fbc7bf-a20c-43a8-b804-fc6477069086", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='34.148.60.238']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.146414Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2eaf56c-4fd5-4aa5-aba8-e51a60b106d1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='34.154.167.171']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.147452Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313fd5e8-c09f-404d-9e61-990b1fc72ad6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='35.224.2.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.148537Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce48b78a-82ed-4013-8c1c-db122bcd9721", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='38.242.134.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.149746Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e9bf2f-2c84-41f2-8232-36a98af75df8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='40.76.205.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.150812Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec8b4ba-531c-4606-9dcd-7604b17b1dcb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='41.60.245.89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.151828Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35767025-556d-4e92-9992-20cbd2e77843", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.131.23.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.15289Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62289800-93b0-41e1-8b91-23150614537f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.134.237.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.153963Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a17755-ba00-4d54-b13d-8504ebf79646", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.5.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.155021Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34ead12-1a2c-438d-ae72-5e0c15a89466", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.41.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.156078Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82844424-aa03-4c08-b7cb-f3112511d249", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.42.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.157108Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feda3543-b3b1-46b8-baec-4cfb6f68bc24", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.68.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.158192Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7d3b13-5aa9-4e6d-af2b-2e761dfa1053", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.81.142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.159267Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9611fdf1-56dd-48ec-9b25-141faa6782e3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.95.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.160376Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181e9fe5-fed8-4831-8626-824411235b2d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.153.103.80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.161625Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df6bec5-b290-488d-a691-e38d51d5cef0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.157.10.218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.162692Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da20df61-14aa-4f13-add7-32a91ec7197d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.157.26.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.163714Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482986bb-4d9a-40c3-8ce5-900817cca45c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.157.46.233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.164761Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb7f6b8-8e32-466e-b565-c349c7241f0c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.159.52.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.165839Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f960ffd3-7300-40ff-b6d8-f409fd0f0b6d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='43.163.218.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.167225Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd1bb93-73eb-40df-8add-74c48c19b245", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.95.214.102']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.168255Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7190a9-c3f7-40b8-aa2c-0e1b33dacd38", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.128.234.237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.169242Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ca4c81-a042-437a-91dc-1a318dd2a49c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.101.144.131']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.170218Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08a6628-0577-444a-b066-de8ab6366b3c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='46.101.248.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.171271Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a768e9-f228-4def-9be8-2cbb28491c72", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='47.186.110.88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.1725Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df741571-0fc2-4fc2-9aab-14e408b8e354", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.88.112.60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.173506Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdeea34-7391-4388-b2cc-0e104a6ee0c7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.204.232.131']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.174537Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c2f655-0170-4e5e-a69a-5e7d761ecc64", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='49.248.153.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.175527Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6badfd-3a07-4e64-b293-c887b002ef3b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='50.214.170.83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.176595Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5a1609-79b2-4ef5-b928-b3cf3df439e7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.77.245.237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.177581Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3f3c9e-9a55-45c0-bd3f-10d66dc6e339", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.195.247.123']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.178651Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f2c1a5-392b-4eb6-b773-3c01b792ab86", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='51.250.86.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.179643Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce4136e-c588-48ad-9388-38d6278bb17b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.23.247.96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.180703Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5617e944-7b4f-450b-a63b-9126cad6f3cc", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.29.145.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.181694Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc41bb8-7d0b-475c-8cd4-8539ec825bbf", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.126.91.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.182754Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ace43d-ef9b-42f9-b7ab-1db47d39a68b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='59.127.225.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.184007Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01c1374-c55e-4598-b166-361b68f4587f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.75.248.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.185018Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298499a1-de34-435a-a5ab-9dbf3760d94b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.85.160.213']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.186008Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd03e5e1-8db7-48f3-9afb-64f478fcf6cd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.187029Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1f64ca-b6c1-44c7-89ba-a3a30d53d33e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.188044Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e7796b-f2d3-4842-aa36-751d97fa95eb", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.189075Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc085d83-2760-4f4e-b0e7-ea7930eeeaa7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.172.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.19006Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddd706f-eada-4b3d-839d-3667c801c1d8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.191145Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bb90a1-c733-44ab-ac41-21d664384612", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.192258Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d53b32-268d-49b8-adcd-ec8def588a77", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.193304Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625dcc30-81f2-42bb-80c9-2900805143ed", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.194546Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3e241e-c0b6-4ff1-8d92-ef0a6296ac19", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='61.177.173.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.195642Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5a0ef7-2c44-49ed-86db-1be6c1faabee", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.14.67.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.196691Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a446b0-eb35-4c91-a1b6-f1d78469c06f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.175.223.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.197713Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c817772-7540-4013-836c-bf56b646d345", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.203.224.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.1988Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6eb3115-0a31-473c-8aea-0593f7aef8ce", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='68.183.170.149']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.199811Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341cecb2-266b-4373-8985-4f6f42cc5466", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='68.183.225.151']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.200875Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c867d81-c1cd-4d36-9101-c0956ab2b5cf", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='79.160.205.22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.201912Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7da368-aef8-449f-802f-df98394872e3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='80.251.216.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.202993Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1899436-9a8c-4d2f-9b93-8ced5ffdcc14", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='82.223.131.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.20405Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd98c80-de4d-4c3a-8c4a-773d8ed35d17", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='88.204.58.208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.205079Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263c4385-ce61-4aad-bc34-1250778fea69", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='89.175.20.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.206332Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fb72d5-63ab-463d-8f45-fe9dcd5b6395", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='90.176.171.107']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.207354Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4aab4e-f808-4819-94f0-c0468463f9e1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.241.68.2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.208399Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c055ea76-369b-475d-bd5e-5d92aa156d3c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='93.153.192.254']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.209416Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b348e7-d419-47ba-a9b9-303d5819195e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='94.153.212.78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.210461Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c7552b-f974-4969-934c-bd05af189e65", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='94.247.17.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.21147Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da31055c-e19e-4648-85a4-7aca258e45e1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='95.71.126.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.212512Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86bf673-b60b-42ed-87b9-ccfff74fc853", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='95.181.239.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.213538Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d7ea5e-8029-4973-9515-79ba97f159a1", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='95.237.195.222']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.214615Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d149f0d1-1c47-4633-9aed-5b1d1a0622e4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='96.78.175.39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.215657Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0953a236-261b-41f2-b6ca-1980c3041600", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.16.202.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.216954Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff41e5c-c114-44b0-9a38-7087ab7e200b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.39.93.93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.217977Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c2bda8-8a3a-4a0e-9172-3be6ece73d2b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.67.165.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.219021Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9115b4d1-692c-4393-91d1-1ab6679d46fa", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.93.237.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.220079Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa552b8-1b8f-4a71-9f68-402480cdbc95", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.100.60.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.221139Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b32544-9c99-4c0b-a24c-713c4626a1f7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.149.159.237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.222145Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3470fc-8f76-4577-9d57-bde79b733ab5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.153.191.119']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.223231Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723dacda-3508-4775-9361-8ce30707dbb3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.189.235.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.224288Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5181c270-8ac5-45a9-9411-46f475544c5d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='103.248.120.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.225318Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2faee9da-93cf-4d9b-8705-13b549e940bd", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.157.26.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.22639Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc59524-f86a-4db5-88d9-f97554ef15f9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.221.252.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.227456Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc49064c-f5a0-458a-8356-2dfd1aa217e9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='104.236.111.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.228797Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933727b1-edf7-41e0-93cf-4dee81e7abc8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='105.96.11.65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.229836Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07d1c80-f5fb-4209-ba7a-5f8536867f8a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.246.224.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.230878Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804993de-0600-46fc-acab-fb8d5676da9d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='106.249.240.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.231882Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5015079-e853-46f2-a532-43a5029346a0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='109.115.187.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.23298Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4c6ea4-d03a-430a-a721-78ad3a3b24ea", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='111.2.69.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.233983Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caeb1b8d-47df-4d0f-99af-138dbfce5149", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.35.151.203']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.235007Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2638b2-59e6-4048-8008-151ec93312ed", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.199.123.211']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.236138Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9caab13d-e63b-47f2-a4fd-1512a302971f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='114.205.54.184']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.237198Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375e294a-1421-4a2a-a348-d73bdd962034", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='115.236.8.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.238206Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df543c56-51e0-420b-9abf-3d59f89062ec", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='115.241.167.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.239877Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56424b13-b5d8-4bac-9555-de46d0f3d90c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='118.34.33.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.240922Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1d43ba-c97a-448f-b164-e3359c876f46", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.139.83.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.241946Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f8e716-5a5b-4b75-8bb6-4d94f4af6b27", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.150.14.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.242997Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b09f08d-3a2c-4b93-bf79-ce54db39bdc9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.155.171.79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.244081Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1ab53e-8746-4f79-bc29-a0fce2096748", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.161.122.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.245093Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f6988d-38a9-4aa4-9bca-539534429f85", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='121.168.123.179']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.246136Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60761e4-041b-4cd1-adbf-98c155e97aff", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.99.191']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.247191Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96315a06-b775-40ff-8ed2-65d08778995e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='122.117.220.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.248316Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225884ac-6f38-4f23-b681-f7445ed16d9c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='124.223.21.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.249349Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497dc4af-8715-4036-8b9f-67fe6cf5c117", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.140.246.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.250419Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516bc7c2-7629-4da1-a476-3c4f05a33c53", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.229.152.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.251633Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6220df42-db98-4457-94fd-d2a9a382a3d9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='125.229.200.69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.252692Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07421db8-3bde-4525-9c52-1f0845d863f2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='128.199.74.173']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.253733Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66822fd2-c1de-4fba-a61a-a2d00691d39c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.150.43.161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.254783Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56996b19-c610-4c6c-8c84-380f14a619f2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='129.226.210.162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.255783Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8712798-1ed4-4bc3-8138-ce36e846c0ac", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='133.130.101.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.256829Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c291385-e455-47c4-9efe-4751488beac6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='138.68.72.245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.257854Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1f1480-afc3-4876-a9d4-38ab1f1b921d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='138.68.103.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.258908Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a2c4c1-8e06-496c-a012-a8251e155839", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.0.163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.259916Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc4bd40-a2af-46ef-a915-4ba444140990", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.22.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.260991Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4dee095-9b1d-434d-b289-cee74b0fa69b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.92.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.262205Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2455d1-d33b-4d94-962e-c5def9f0dd6d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='139.59.186.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.263256Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f05b49-a3ce-4e44-b2ee-06e92d8129be", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='143.244.180.246']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.264316Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84049840-749a-4b88-bbad-7f3d6f3c6d96", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.96.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.26536Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a8de08-d986-435a-a583-d66cd43e0bea", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.190.168.122']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.266414Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2697c63-fda8-4a40-ab10-9a32a629673d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.182.218.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.267443Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcdef3f-f4eb-4a90-b3b0-1e123fbbb48e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='147.182.245.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.268525Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681119c9-9033-4420-8414-74cbd6d27722", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='152.70.148.207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.26956Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667bec03-100d-4773-b808-bed1da3433b0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='154.221.17.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.270634Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdeefbc-0ea6-4fee-a15a-438d145217c3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.230.91.199']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.271649Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f68e9ed-a53a-4980-9ba9-32682a170aa9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='157.245.76.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.272756Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbee97a-cc70-4c44-b526-445bcafb5bee", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.202.231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.273957Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d543f9f-1c51-4b09-ba3c-0f379caf17a3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.208.228']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.275021Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ae138c-4fa2-4b21-9216-c0b8b3a93359", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='159.223.212.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.27609Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9163a9-648d-4e01-a218-5093290996d9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.35.79.199']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.277097Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e462a4-87c6-471f-939e-4724baed4f2f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='161.132.219.115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.278123Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0421b7cc-dadc-4271-a6ba-9293ed2d7aff", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.243.80.57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.279178Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0db733-5a42-42ae-836e-a159a6a4cf18", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='162.243.116.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.280251Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a38df67-ee8e-4090-a89e-d5abfef381a4", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='163.172.165.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.281289Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a50d15d-ef55-4bc6-9709-597c8c23c0c5", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='164.92.94.46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.282356Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51cd1252-4f2e-4dae-b9b3-fd1f9dbcee68", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.22.1.73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.283374Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d78907-0ba9-478c-ae9a-edd754243ab9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.233.123']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.284716Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe7d787-16fe-493b-8c04-55119ab95ccf", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.154.253.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.285751Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b0ad1e-76ca-4a5d-8cf5-d54f789c3d88", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='165.232.92.56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.286885Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaad3e22-9c44-45af-bc4a-60e6935b8f84", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.99.78.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.287934Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93471f16-6eff-44aa-b9cc-4657933dbb3e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.99.126.215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.289007Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2861cc25-4fb7-48fd-9ac8-396f5d695f69", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.172.246.83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.290045Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f77f1af-53d8-493a-8c89-4e6fff67cb91", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.106.117.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.291087Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b13351d-be76-44a2-bfe4-41cfb7a5054c", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='171.244.61.67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.292145Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ade3349-82bf-4224-89a5-284bf957d3f2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='174.138.28.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.293183Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336025e9-831c-46a7-a239-dc997188a87e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.126.232.120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.294234Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df0ccc0-77d4-47b7-90b7-58983c23240e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='175.144.181.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.295311Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f07b738-7e31-49a4-a935-d267e5d2d7f0", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='177.155.228.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.296523Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06e6a49-c056-4345-a3c6-8f8d5fee74f2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='178.154.209.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.29755Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91eefce1-a39f-468d-a49d-de71efaddf89", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.61.245.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.298618Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230ddda6-bb84-4142-9ebd-e5736158c6af", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='179.96.107.200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.299637Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2faaba1d-89c4-4bac-9d8a-86131285ab35", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='180.71.47.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.300684Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d323a6-3c1d-40d5-85f4-a6c6cebdec8a", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.57.189.54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.30173Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f989d19-ab40-43a7-a849-da29c426efe3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.64.10.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.302816Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474a0739-51c3-47f6-b4f5-0260b8cff6ff", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='181.114.143.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.303869Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099e0bfe-3e51-47dd-a54d-2637c0cf180b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='182.252.133.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.304952Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6aec57b-a6af-4566-af1b-954c0a0bbe20", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.166.162.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.306004Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7673b1-b162-4bcd-bde6-8f9358c37e85", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='185.177.57.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.307312Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d7456a-9535-4610-8f8a-8d62f0f58011", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='186.6.199.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.308462Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97c0e83-455f-40c6-8ab4-9a51dafc37c6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='186.10.245.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.309612Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc7fb4e-b3fb-4921-9dd0-7c7340b55634", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='186.13.37.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.310709Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee4478b-a7be-41b6-b5dd-4cc32105e9e3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='186.125.169.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.311746Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68dbdcd4-2a18-42fd-b9ea-b4655ed254f2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='186.189.249.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.312808Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee688779-b679-48ae-b075-860d9a28de50", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='186.248.219.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.313877Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b2f542-cc77-4f52-9c7b-2b5e78a90d89", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='187.189.241.135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.31497Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb42105b-e6f8-43a0-8a80-7f8b98af7319", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='188.247.48.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.316044Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ddcdd2-df97-4f37-925b-e1e006a45cbf", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='189.105.10.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.317101Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90b2c35-f784-45da-9f21-b09a9bf0ef21", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='190.108.85.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.318206Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fecafdb-7bd4-47e2-a1fe-773aa6728abc", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='192.210.196.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.31947Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3afcafa-38ce-4f3b-b262-0c55774404ca", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='192.241.154.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.320593Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1530228-c374-4a71-b3d7-3a23c8a9316d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='192.241.171.230']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.321635Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7f69ca-75dc-4dc3-9828-b9587ed7cdef", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='192.241.172.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.322713Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c64c296-feb2-419a-b9b5-877a314474dc", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='194.110.203.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.323744Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9397d0ff-3794-430d-8584-93809040d3a8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='197.26.19.254']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.324805Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0adbe3-86c8-4228-8777-46aec98f33bf", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.23.206.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.325824Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d331b5e-9cba-491f-9aaf-4ec08c651bf3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='198.74.102.16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.326913Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da81dd17-f010-4af2-8f94-d6d11297a9c2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='200.201.187.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.327985Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada2edbf-1700-447d-b231-7d0ed719d14f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='201.190.149.243']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.329121Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a249f9-67f1-4292-a301-19c68fbc961b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='202.157.184.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.330408Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dba97c7-1dd9-4711-877c-1fc9b8fb4396", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='204.48.17.233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.331468Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a882db1-1c7a-4388-99ef-306ad932804e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='205.185.115.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.33258Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e709c9ff-99f4-47d8-b8d6-3bf78cdc1db2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='206.189.156.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.333623Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7f5cfb-9381-43a5-a15a-6ec219a74336", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='207.249.96.147']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.334701Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1e1800-bfaf-4a44-a4c0-4717696b863f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='207.249.123.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.335709Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6908cc74-00ab-4e16-94df-493038f8efc3", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='209.141.58.72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.336778Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7274ca0f-88fa-4084-9273-2968661022d6", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='210.17.230.213']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.33779Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d695c9-bbd2-4698-a2d2-85869202bd8e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.64.192.120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.338836Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c63a5d5-57f6-4b40-ac0d-4bffb4cd6136", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.114.224.97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.339903Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d805978e-f66f-4983-8d7f-a78c45689625", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='211.125.67.35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.340943Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe33774-30b7-475a-b95f-554e32f9e80e", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='217.115.58.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.342092Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeee274b-6c74-49ef-a9e1-4518075b4001", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='217.182.75.250']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.343126Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28f2d58-c1de-435a-ae3d-66e6f150d4ac", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.211.140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.344174Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360de3c9-4405-4f5c-ad00-3d40c870e9ad", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.132.211.184']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.345174Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e70dc5-a23f-4ea5-a93e-2661fa84f9a8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.134.25.54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.3462Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678d0d9e-5891-4b5b-a215-9231e6de2fa9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='220.135.206.33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.347238Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af67a0e3-4b37-4b9a-8ff9-2dfa853793b7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='221.204.171.81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.34832Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3f219a-e978-4c7a-a7d5-0872adbf0e55", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.204.53.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.349401Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e25ba2-269d-4494-9289-2badc41de232", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.61.219.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.35047Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16123c81-1036-4a9c-9b55-42957b31d6a9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.351534Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9228c1f-07e1-4f38-91e2-edf94effce76", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.352808Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7f96c5-83e4-401d-8a31-3372f7671535", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.353852Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5d5ac7-d7cf-43b1-853b-9dfc4227842b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.354916Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918a21cc-3384-437f-857d-3a7e37f14d75", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.355954Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5f8132-3dff-4262-9a18-beb6e26eb17d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.134.144.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.357013Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258d243a-8465-40b5-84f7-17a7bc0e0079", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.210.101.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.35807Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91b5da4-1c44-4be7-9a54-03f9dd5a4ba7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.36.234.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.359156Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7f75ed-396c-47ae-9372-f14869a03234", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.251.235.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.360224Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d67b351-9cb5-4463-985d-a05791aced03", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.207.175.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.361263Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c846e7-6a6c-4277-be11-f726873d2e30", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.118.63.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.36238Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c149d7d-385c-4dc1-9e35-df687af563d8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='144.126.131.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.363423Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f2896b-18c9-4b45-9e1a-947fd2d368db", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.364679Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141a230a-3767-495e-b3cb-87ca0a750772", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='163.172.116.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.365773Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc02f74-396b-4e70-8059-8ff92b50574f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.248.133.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.3672Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbea2ab-0969-4ec1-8eef-ac66a5f32367", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.187.164.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.368264Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0951f803-9394-4822-ac9d-aeee50d74e7d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.154.40.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.3693Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5cc08a-0b79-458c-9e2e-6a1c87d1b308", "createdpe": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.34832Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3f219a-e978-4c7a-a7d5-0872adbf0e55", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.204.53.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.349401Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e25ba2-269d-4494-9289-2badc41de232", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.61.219.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.35047Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16123c81-1036-4a9c-9b55-42957b31d6a9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.351534Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9228c1f-07e1-4f38-91e2-edf94effce76", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.352808Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7f96c5-83e4-401d-8a31-3372f7671535", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.353852Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5d5ac7-d7cf-43b1-853b-9dfc4227842b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.354916Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918a21cc-3384-437f-857d-3a7e37f14d75", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.355954Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5f8132-3dff-4262-9a18-beb6e26eb17d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.134.144.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.357013Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258d243a-8465-40b5-84f7-17a7bc0e0079", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.210.101.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.35807Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91b5da4-1c44-4be7-9a54-03f9dd5a4ba7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.36.234.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.359156Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7f75ed-396c-47ae-9372-f14869a03234", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.251.235.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.360224Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d67b351-9cb5-4463-985d-a05791aced03", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.207.175.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.361263Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c846e7-6a6c-4277-be11-f726873d2e30", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.118.63.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.36238Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c149d7d-385c-4dc1-9e35-df687af563d8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='144.126.131.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.363423Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f2896b-18c9-4b45-9e1a-947fd2d368db", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.364679Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141a230a-3767-495e-b3cb-87ca0a750772", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='163.172.116.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.365773Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc02f74-396b-4e70-8059-8ff92b50574f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.248.133.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.3672Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbea2ab-0969-4ec1-8eef-ac66a5f32367", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.187.164.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.368264Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0951f803-9394-4822-ac9d-aeee50d74e7d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.154.40.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.3693Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5cc08a-0b79-458c-9e2e-6a1c87d1b308", "createdpe": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.34832Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3f219a-e978-4c7a-a7d5-0872adbf0e55", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.204.53.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.349401Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e25ba2-269d-4494-9289-2badc41de232", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.61.219.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.35047Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16123c81-1036-4a9c-9b55-42957b31d6a9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.351534Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9228c1f-07e1-4f38-91e2-edf94effce76", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.352808Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7f96c5-83e4-401d-8a31-3372f7671535", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.353852Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5d5ac7-d7cf-43b1-853b-9dfc4227842b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.354916Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918a21cc-3384-437f-857d-3a7e37f14d75", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.355954Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5f8132-3dff-4262-9a18-beb6e26eb17d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.134.144.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.357013Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258d243a-8465-40b5-84f7-17a7bc0e0079", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.210.101.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.35807Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91b5da4-1c44-4be7-9a54-03f9dd5a4ba7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.36.234.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.359156Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7f75ed-396c-47ae-9372-f14869a03234", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.251.235.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.360224Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d67b351-9cb5-4463-985d-a05791aced03", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.207.175.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.361263Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c846e7-6a6c-4277-be11-f726873d2e30", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.118.63.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.36238Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c149d7d-385c-4dc1-9e35-df687af563d8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='144.126.131.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.363423Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f2896b-18c9-4b45-9e1a-947fd2d368db", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.364679Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141a230a-3767-495e-b3cb-87ca0a750772", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='163.172.116.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.365773Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc02f74-396b-4e70-8059-8ff92b50574f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.248.133.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.3672Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbea2ab-0969-4ec1-8eef-ac66a5f32367", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.187.164.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.368264Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0951f803-9394-4822-ac9d-aeee50d74e7d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.154.40.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.3693Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5cc08a-0b79-458c-9e2e-6a1c87d1b308", "createdpe": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.34832Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3f219a-e978-4c7a-a7d5-0872adbf0e55", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "ssh brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='223.204.53.66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.349401Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e25ba2-269d-4494-9289-2badc41de232", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='37.61.219.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.35047Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16123c81-1036-4a9c-9b55-42957b31d6a9", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.351534Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9228c1f-07e1-4f38-91e2-edf94effce76", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.352808Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7f96c5-83e4-401d-8a31-3372f7671535", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.353852Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5d5ac7-d7cf-43b1-853b-9dfc4227842b", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.354916Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918a21cc-3384-437f-857d-3a7e37f14d75", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.93.16.218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.355954Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5f8132-3dff-4262-9a18-beb6e26eb17d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='45.134.144.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.357013Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258d243a-8465-40b5-84f7-17a7bc0e0079", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='62.210.101.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.35807Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91b5da4-1c44-4be7-9a54-03f9dd5a4ba7", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='66.36.234.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.359156Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7f75ed-396c-47ae-9372-f14869a03234", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='72.251.235.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.360224Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d67b351-9cb5-4463-985d-a05791aced03", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='91.207.175.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.361263Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c846e7-6a6c-4277-be11-f726873d2e30", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='92.118.63.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.36238Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c149d7d-385c-4dc1-9e35-df687af563d8", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='144.126.131.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.363423Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f2896b-18c9-4b45-9e1a-947fd2d368db", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='146.88.240.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.364679Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141a230a-3767-495e-b3cb-87ca0a750772", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='163.172.116.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.365773Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc02f74-396b-4e70-8059-8ff92b50574f", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='167.248.133.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.3672Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbea2ab-0969-4ec1-8eef-ac66a5f32367", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='170.187.164.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.368264Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0951f803-9394-4822-ac9d-aeee50d74e7d", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='195.154.40.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.3693Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5cc08a-0b79-458c-9e2e-6a1c87d1b308", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='212.83.172.82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.370349Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260ea7ba-6a01-4ce7-9a8e-949be3afece2", "created": "2023-01-27T23:39:14.168027Z", "modified": "2023-01-27T23:39:14.168027Z", "name": "Bruteforce Host", "description": "sip brute force activity detected", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value ='212.129.11.93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2023-01-27T23:39:15.371377Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}]}]}
;